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FYl, for the DCS-3000 (see below) 

I I THANKS!) 

Original Message . 

From ) | OTD) (FBI) 

Se nt:' Monday. Octob er 24, zoos 5:16 PM 
To l ~t OI) (FBI) 

Subject: RE: 


4iftifiU££icicn 

NON-RECORD 

□ 

Regarding the DCS-3000: 


(1) a complete description of the types of FISA information stored: 

The only information collected and stored by the DCS-3000 is pen -register/trap-trace data. Per CALEA, this 
information is intercepted by the targets' service providers and delivered to the DCS-3000 in standard formats. 
The information is parsed based on target telephone number and stored in text-formatted files for each target. 


(2) an explanation ot how FISA information can be searched and retrieved: 

Most field offices use the DCS-3000 as a "front-end* collector. The pen-register/trap-trace information collected 
by the DCS-3000 is uploaded to the Telephone Application (TA) database at HQ. The FISA pen-register/trap- 
trace information can be searched using search tools provided by the TA database on FBI Net. The DCS-3000 
also has a rudimentary report generation feature and simple text-based search tools for use by technically trained 
agents and system administrators. 

DATE: 06-07-2007 


(3) how the FBI's standard minimization procedures are implemented: 
The DCS-3000 only collects pen-register/trap-trace information. 
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AH: The FISA Court (FISC) is seeking information about "databases" that contain raw FISA material or 
U,S. person information from FISA intercepts that is not in indices. 


Red Wolf I 

M i a complete oescrintioi 


Jean fill in the gaps and correct any misstatements below.) 
in of the tvnes of FISA information stored: „ 


(2) an explanation of how FISA information can be searched and retrieved: Access to FISA audio is 
generally restricted to the linguists assigned to the case, the s upervisor, the case agent and the 
system administrator in the office where the audio is coliectedl 



(3) how the l - til's standard minimization procedures are implemented: Linguists read and sign the court 
orders certifying that they understand the minimization guidelines specific to each case. 
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answer tne questions oeiow.j 

(1 ) a complete description of the types of FISA information stored: 

(2) an explanation of how FISA information can be searched and retrieved: 

(3) how the FBI's standard minimization procedures are implemented: 

DCS-3000: 1 b an answer the questions about DCS-3000 below.) 

(1 ) a complete description or the types of FISA information stored: 

(2) an explanation of how FISA information can be searched and retrieved: 
f3f how the FBI's standard min imization procedures are implemented: 

l ean answer the questions befow.) 

(1 ) a complete description of tne types of FISA information stored: 

(2) an explanation of how FISA information can be searched and retrieved: 

(3) how the FBI's standard minimization procedures are implemented: 


|can answer these questions.) 

( I J 9 CUfllfJIUlfcs TTBtUJI ipilDI 1 Ul u id types of FISA information stored: 

(2) an explanation of how FISA information can be searched and retrieved: 

(3) how the FBI's standard minimization procedures are implemented: 
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hi 
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he 
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C1TA (CITA is still online, but I do not believe anv new da ta has been loaded since EDMS took over the 
role of Tech Cut Archive. I j hould be able to answer the questions below,) 

(1 ) a complete description or the types of FISA information stored: 

(2) an explanation of how FISA information can be searched and retrieved: 

(3) how the FBI's standard minimization procedures are implemented: 

NY Tech Cut Database I I n NY can direct you to someone who can answer the 
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questions below.) 

(1) a complete description of the types of FISA information stored: 

(2) an explanation of how FISA information can be searched and retrieved: 

(3) how the FBI’s standard minimization procedures are implemented: 



NON-RECORD 


Good afternoon, i ■ 

I attended the EDMS meeting with! Irom NSLB last week. 


The FISA Court ha s renuesip ri some information on how the FBI is handling FISA information in b 6 
its various databases. ! j asked me to contact you regarding any FBI databases (besides ■- ■ * 

EDMS and DWS) that contain: (1) raw FISA take, or (2) US person information from FBI FISA 
collection that has not been indexed into general FBI indices. For each of these databases, the 
Court is asking for: (1 ) a complete description of the types of FISA information stored, (2) an 
explanation of how FISA information is handled, specifically the manner in which data can be 
searched and retrieved, and (3) how the FBI's standard minimization procedures are implemented. 

(Valerie specifically mentioned CITA and NY's database as examples). Also, are these databases 
considered to be sub-systems/databases of EDMS? 

I appreciate any assistance you can give me. Please let me know if there are other POCs who 
are better able to answer the questions. 
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(RMD) (FBI) 


From: | |OI) (FBI) 

Sent: Thursday, November 30, 2006 3:28 PM 

To: | p i) (FBI) 

Subject: FW: FISC database response 


Qnainal Mesaat 

From a 

Se nt: Monday. Octo 
Subject: FW: FISC 


_JOI) (FBI) 

5er 31, 2005 3:10 PM 
“□(OI) (FBI) 
fata base response 


Can you give our reply? TKs! ' 
— Or iginal Message — 

From: f 
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Precedence : ROUTINE 


Laboratory 


Date: 10/29/1999 


Attn: 


l QTERF 
QTERF (Enc.) 

^JTERF {Enc . ) 
X)TERF (Enc.) 
/QTERF (Enc.) 


From : Laboratory 

Electronic Surveillance Technology Sect ion/ Operational 
Support T racking Office i ■ 

Contact: | | (703)| | 

Approved By: | I 



Drafted By: | | alm 

Case ID #: 268 -HQ-1217551 
268 -HQ- 1001725 

Title: OPERATI ONAL SUPPO RT TRACKING OFFICE (OSTO) 

PROJECT | | 

PROJECT 1 KEJJHUUK. 1 
PHASE FIVE REVIEW REPORT 

Synopsis: Projects I I nd REDHOOK Phase Five Review was 

held on 10/21/1999 at the Engineering Research Facility. The 
results, conclusions and recomme ndations f rom these reviews are 
captured in the attached Project and Project REDHOOK 

Phase Five Review Report, dated 10/21/1999 . 


Enclosure (s) : Projects 
dated 10/21/1999. 


land REDHOOK Phase Review Report 


Details: The Phase Five Review for Pro j ec t s I and REDHOOK 
was held at the Enginee ring Research. Facility on 10/21/1999. 

I I Project Leader, Data Intercept Technology 

Unit . pr ovided an overview and status of current activities for 
Pro j ects l l and REDHOOK . Key decisions from these 

presentations are captured within the referenced enclosure. 
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From: Laboratory 

Electronic Surveillance Technology Section/EST-4 

DITU, nT-RBP I 

Contact: | | (7031 

Approved By: | J 

Thomas Marcus c 
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case ID #: 268 -HQ- 1001725 (Pending) 


Title: REDHOOK 

PROJECT CLOSEOUT 


Synopsis: EST-4 is requesting that the Project Closeout Report 

for RedHook be approved. 

Enclosure (s) : Project Closeout Report for RedHook Project 

Details: The Laboratory Division, Electronic Surveillance 

Technology Section, EST-4, is responsible for the development of 
lawfully authorized digital telephony collection systems. The 
RedHook Project was developed to facilitate lawfully authorized 
collection of integrated services digital network (ISDN) traffic 
on the subscriber's line. The RedHook development effort has 
been completed. The attached Project Closeout Report documents 
the results of this effort, and is being submitted for approval. 

LEAD ( 3 ) : 

Set Lead 1: 


LABORATORY 


( AT QUANTICO, VA 

That ESTS approve the Project Closeout Report for the 
RedHook ISDN intercept system. 
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To : Finance 


Date: 03/30/1999 


Attn: Mr. 

Mr. 


Criminal Investigative 
Laboratory 


(Enclosure] 


I Room 6888 
Room 6888 

I Room 5155 
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Iqt erf 


From : Laboratory 

Electronic Surveillance Technology Section, EST-4 

DITU, QT ERF 

Contact: l I ( 703 ) I 


Approved By: 



Drafted By: 
Case ID #; 


Title; 


J) 268 -HQ- 1001725 (Pending) 
REDHOOK 

CONTRACT ACTION 


Synopsis : JX 

has delivered fifllUlliy LU" Ult! JJB1 101 LliH yiUUUCLUHl Of CWO 

integrated services digital network (ISDN) collection systems. 
The FBI is also funding the purchase of a number of key system 
components to maximize its present ISDN deployment capability. 
These pre-production prototypes will be fabricated at Harris 
Corporation in Melbourne, Florida. 


Enclosure (s) : (U) Requisition number 897859 

IQA tails : Vf I to the FBI for the 

purchase of two pre - proauc r. ion isuw intercept systems . These 
systems will be built by Harris Corporation in Melbourne, 
Florida. 

(U) The DITU will be purchasing a number of system 
components to maximize the number of lawfully authorized ISDN 
collections the FBI is able to support. The following is a list 
of those components DITU will be purchasing; eight line cards to 
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support processing and distribution units, 18 I Ho ower 

units, and 18 single slot bridge chassis. The enclosed funding 
of $130,000 is for the purchase of these components. Residual 
funding will be used for case support. 


LEAD ( S ) : 

Set Lead 1: (Adm) 


CRIMINAL INVESTIGATIVE 
AT WASHINGTON, DC 
(U) For information only. 


Set Lead 2: (Adm) 

LABORATORY 

AT QUANT I CO, VA 
(U) For information only. 
Set Lead 3 : (Adm) 

FINANCE 

AT WASHINGTON, DC 


(C> 


UK That the Finance Divi sion coo rdinate the purchase 
of two pre-production prototypes foi | fr nd system components 
to support maximizing the FBI's deployment: capability. 
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Electroni c Surveillance Techno logy Sect i on/ CIMU/OT- ERF 
Con tact : j | (703) I 1 

Approved By: 
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Case ID #: 268 -HQ- 100172 5 (Pending) 

Title; RED HOOK 

TRIP REPORT 



08/06/1998 


(l, 7 C 


Synopsis: To re port the details of Electronics Technician (ET) 

I I travel to Melbourne, Florida, to attend the Red 

Hook Digital intercept System status and planning meeting on 
07/29-31/98. 


Details: ET l I traveled to Melbourne, Florida to attend a 

meeting with Harris Company developers w hich was conducted by 
Electronics Engineer | | (EST-4) . The status of 

the Red Hook pro j ect 1 WAS Uiyt'Uyyyu . "Milt, ters discussed included 
open tasks, action items, and development time lines. Acceptance 
testing is tentatively planned for mid September. 

A "lunch Box" computer-based Red Hook system, called 
"Red Hook Lite," was proposed by Harris and approved for 
development. This system will have a simplified graphical user 
interface (GUI) and wi ll be designed for quick reaction 
deployment. ET | " provided input regarding the tactical 
advantages of the Red Hook Lite system and format of the 
simplified GUI. 
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Precedence : ROUTINE 


Date: 02/05/1998 


To: Finance Division 


National Security 
Criminal Investigative 
Information Resources 


Attn: 


Attn 

Attn 

Attn 




oom 6032 
Room 6875 
Room 6875 


Room 7110 
Room 7116 
Room 5835 
Room 8998 


From: Information Resources 

Electronic Surveillance Technology Section, EST-4 

NADU, QT E£E | 

Contact: | | ( 703 ) 

Approved By :T I 
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Case ID #: 268-HQ-1001725 (Pending) 

Title: NETWORK ACCESS DEVELOPMENT UNIT (NADU) 

PROJECT REDHOOK 
CONTRACT ACTION 


t-:: b 

t- 1 C 


Synopsis: The EST-4 Unit is recommending that funding of 

$650,000 be approved to support the field deployments involving 
the collection of integrated services digital network (ISDN) and 
the replacement of eight processing and distribution unit (PDU) 
systems . 

Enclosures: Requisition number 863546 

Details: The RedHook ISDN intercept system has successfully 

completed its development of a personal computer (PC) PDU. The 
PC PDU is replacing the existing virtual memory extend chassis 
based solution deployed prior to this development. The EST-4 is 
requesting that a pre-production quantity of eight PC PDU systems 
be built to certify production quality and replace systems that 
are already fielded. 

Additionally EST-4 is requesting that a field support 
task, with the low level development that is involved with field 
support, be funded through December 1998. The funding required 
for field support is $300,000. The funding required for the pre-production 
PC PDUs is $350,000. The total funding required for 
this contract action is $650,000. 

The RedHook system has been successfully deployed in 
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four locations with additional locations requesting ISDN support. 

These pre-production PC PDUs will ensure that the FBI maintains a 
core capability to deploy ISDN intercepts prior to full 
production quantities being procured. 

The field support effort has been extremely valuable in 
all previous RedHook installations due to the complex nature of 
both the technologies present in the collection system, the 
target system, and the forwarding systems. 

ISDN is, and will remain, a rapidly developing 
telecommunications technology. This requires the FBI to maintain 
a team of engineers capable of developing field modifications to 
the RedHook system when required to conduct lawfully authorized 
ISDN collections. 

ISDN is typically used in Internet related 
communications due to its increased speed and reliability over 
modem communications. These ISDN Internet connections often 
bring the newest services on-line first adding to the technical 
overhead on these types of lawfully authorized collections. LEAD (s) : 

Set Lead 1 : 

ALL RECEIVING OFFICES 

For informational purposes only. 

LEAD (s) : 

Set Lead 2 : 

FINANCE DIVISION 

AT WASHINGTON, DC 

The Finance Division is requested to schedule a 
Contract Review Board meeting and present the Harris Corporation 
proposal for RedHook funding. 

l -,6 
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Precedence : ROUTINE 


To: Information Resources 


Attn: Mr. 


Date: 07/21/1997 


Room 5835 


From: Information Resources 

Electronic Surveillance Technology Section, EST-4, 

NADU, QT |EB£ 1 I 

Contact: | |( 7 0 3 ) 

Approved By: Morris Carolyn G 


Thomas Marcus C 


Drafted By: 


Case ID #: 26 8 -HQ- 1001725 (Pending) 

Title: NETWORK ACCESS DEVELOPMENT UNIT 

PROJECT REDHOOK 

CONTRACT REVIEW BOARD (CRB) MEETING 

Synopsis: This communication is to notify Assistant Director 

Morris of a CRB meeting on 7/25/97 at 10:00 a.m. to review an 
enhancement to the RedHook contract with Harris in Melbourne, 
Florida. 

Enclosures: History of contract 

Details: The EST-4 Unit has recommended that funding be approved 

to enhance the RedHook project. This enhancement funding is for 
development of a new personal computer based processing 
distribution unit and case support/enhancements to the prototype 
system . 
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Precedence : ROUTINE 

To: Finance Division 


Attn: 


(Enclosure) National Security Attn: Mr 

Criminal Investigative Attn 

Information Resources Attn 

Attn 


Date: 06/30/1997 
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From: Information Resources 

Electronic Surveillance Technology Section, EST-4 

NADU, QT ERF 

Contact: | 1 (703) I 

Approved By : Mn vri a Carolyn d 


iomas Marcus 
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Case ID #: 268-HQ-1001725 (Pending) 

Title: NETWORK ACCESS DEVELOPMENT UNIT (NADU) 

PROJECT REDHOOK 
CONTRACT ACTION 

Synopsis: The EST-4 Unit is recommending that funding of $70,000 

be approved to support the Information Resources Division, ^ 

Investigative Applications Support Unit's Signal Related fc7c 

Information Database Input/Output Format. 

Enclosures: Requisition number 863480 

Details: On 6/27/97 | | Unit Chief of the 

Investigative ApplicaC16fl5 SUftBAy C UMC.met with El ectronic 
^sn-rwi 1 lanpA Technology personnel l l and| | 

I I to discuss how the RedHook system's collecLIUll 

database output will interface with the Signal Related 
Information Database Tnpnt/nntmit Format Also present at the 
meeting was Tracor employee! 

As a result of this meeting it has become evident that 
additional funding of $70,000 will be required to characterize 
the possible output information collected during an ISDN lawfully 
authorized telecommunication intercept. This funding will be 
used to purchase and test a majority of the services that ISDN is 
presently capable of and documenting how those services are 
stored in the RedHook system's database. 

LEAD (s) ; 

ALL INFORMATION CONTAINED 
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FINANCE DIVISION 

That the Contract Review Unit coordinate the 
additional funding to support the Signal Related Information 
Database Input/Output Format characterization in support of the 
Investigative Applications Support Unit. 


Set Lead 2: 

NATIONAL SECURITY 

AT WASHINGTON, DC 

For information purposes only. 
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Precedence : ROUTINE 

To: Finance Division 


National Security 
Criminal Investigative 
Information Resources 


Attn: 
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Mr. 


Mr. 
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Case ID #: 268 -HQ- 1001725 (Pending) 


Title: NETWORK ACCESS DEVELOPMENT UNIT 

PROJECT REDHOOK 
CONTRACT ACTION 


Synopsis: The EST-4 Unit is recommending that funding be approved 
to enhance the RedHook processing and distribution unit (PDU) . 

Additional funding is also being asked for to support present and 
future case support. 

Enclosures: STATEMENT OF NEED 

INTERNAL CONCEPT PROPOSAL 
Requisition # 863473 

Details: FBI Contract J-FBI-91-98 was issued to Harris 
Corporation in 1991. This contract was divided into five phases: 

Phase I - Feasibility study. 

Phase II - Prove out the study with 

hardware/software development. 

Phase III - Develop a National Law Enforcement 
Standard, 

Phase IV - Build and deliver three prototype 

Integrated Services Digital Network date- D6-017-2007 

(ISDN) intercept systems to the FBI for classified' by 651?9DMH/ksr/haj 

test and evaluation, and reason: 1.4 (b/gj 

DECLASSIFY ON: 06 - 07-2002 
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Phase V - 


king Copy 

Complete a small production run, 


At the completion of this contract it was determined that the 
system required further development prior to implementing 
Phase V. 


FBI Contract J -FBI- 95 -228 was issued to Harris 
Corporation in 1995. The purpose of this contract is to ensure t ; 

that the future RedHook production systems meet the FBI's ISDN b7‘; 

intercept requirements. The Contracting Officer's Technical 





Working Copy ] 

The RedHook Project is approaching Phase V: the 
procurement phase. GSA has already given approval for an 
indefinite purchase - indefinite quantity contract with Harris 
Corporation with a ceiling of $10,000,000. It is anticipated 
that this development effort will cost $400,000. The purchase of 
11 systems will be the break-even point for the cost of this 
enhancement . 

) It is anticipated that there will be multiple 

United states government agencies purchasing RedHook systems, as 


K3X-4 is recommending that the Contract Review Unit 
(CRU) coordinate the tasking of Harris Corporation, Melbourne 
Government Division to enhance the PDU. Specifically to redesign 
the VME chassis based system to operate on a Pentium processor 
based personal computer. 

EST-4 is also asking for additional funding for both 
case support and new development of system enhancements required 
for future deployments. The additional funding for this effort 
is $300,000. 

Requisition #863393 dated 8/28/96 is in place for 
$600,000 and requisition #863473 dated 5/29/97 is enclosed to 
fund this effort, LEAD (s) : 

Set Lead 1 : 

FINANCE DIVISION 

That the CRU coordinate the enhancement tasks for 
Harris Corporation to upgrade the RedHook system and add 
additional funding for case support. 

Set Lead 2 : 

CRIMINAL INVESTIGATIVE 

For Information purposes only. 


Set Lead 3 : 
NATIONAL SECURITY 
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INFORMATION RESOURCES 


For information purposes only. 
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Precedence : ROUTINE 


To: Information Resources 


Date: 01/17/1997 


Attn: Mr 

Mr 
Mr 


From: Information Resource 

Electronic Surveillance Technology Section 
Network Access Development Unit __ 

Contact: I I 703 I 


Approved By: 


Thomas Marcus C 
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Case ID #: 268 -HQ- 10 01725 (Pending) 

Title: UNESCORTED ACCESS 

ENGINEERING RESEARCH FACILITY (ERF) 

NETWORK ACCESS DEVELOPMENT UNIT 
ISSUANCE OF RETENTION BADGE 

Synopsis: Booz Allen & Hamilton employee| | is 

presently assigned to assist the Network Access Development Unit 
(EST-4) with matters pertaining to EST-4 projects. EST-4 is 
asking the Technical Op erations Section to issue a retention 
badge to Mr \ \ 

Details: The EST-4 has a num ber of projects being supporte d by 

Boos Allen & Hamilton employe^ I ^ as a 

Top Secret clearance and preseflElV 15 ailCWSd 'tTfl£gg6PC5a a'ccess 
to the ERF. Because Mr. I g orks in this facility three 

days a week a retention badge would limit the administrative 
burden associated with daily checking in. 


wo 

Mr -[ 

year . T he i 
Engineerl 

LEAD (s) : 

Set Lead 1: 


Mr. | | has been working for EST-4 for over a year 

a days'S W55K bn-site. It is expected that 
Twill continue to work at the ERF for a minimum of a 
■pint of contact for Mr. I Is EST-4 Electronics 


ALL RECEIVING OFFICES 


Issue a retention badge to Mr. 
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Precedence: ROUTINE Date: 01/17/1997 


To: Information Resources Attn: Mr. 

Mr. 

Mr. 


From: Information Resource 

Electronic Surveillance Technology Section ^ 

Network rmmAnB ITiyjjt: - fc 

Contact: | | 7 03 1 | 


Approved By 

'rnomas Marcus c 


Drafted By: | ~j : lip 

case ID #: 268 -HQ- 1001725 (Pending) 


Title: UNESCORTED ACCESS 

ENGINEERING RESEARCH FACILITY (ERF) 

REDHOOK PROJECT 

ISSUANCE OF RETENTION BADGE 


employed" 

■-Ir 


Synopsis : Vitro 

assist the Network Access* ue vmupillUiiL 


is presently assigned to 
Unit (EST-4 ) with matters 


pertaining to the RedHook project. EST-4 is asking the Technical 
Op eration s Section to issue a retention badge to 

Mr | 1 

netailfl: Tile FST-4 RedHook prnH ect is being supported by Vitro 

employee | pas a Top Secret clearance and 
pr esent ly is allowed unescorted access to the ERF. Because 
Mr. | | works in this facility five days a week a retention badge 

would limit the administrative burden associated with daily 
checking in. 


Mr f 
ive 


f ias been working for EST-4 for over a year_ 
aays a week on-site. It is expected that Mr I 


working fiv 

will continue to work a t the ERF for a minimum of a year 

* _ r I 1 a m _ ^—2 


Tne 


point of contact for Mr 

i "~i 


I I 1 


s EST-4 Electronics Engineer 


b 


LEAD (S) : 

Set Lead 1 : 

ALL RECEIVING OFFICES 

Issue a retention badge to Mr 

Mrs. 

Mrs . 
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Thomas Marcus C 


Drafted By: | \ lip 

Case ID # : (U) 268 -HQ- 1001725 (Pending) 

Title: (U) EST-4 

REDHOOK 
TRIP REPORT 

Synopsis :' ' ' 'tSXT EST-4 Electronics Engineer (EE) 
I traveled to the San Francisco Office 
possible FCI deployment of the RedHook int earat 
digital network (ISDN) interc ept system atl 



o survey a 


(U) Details : ' X On 11/13/96 ee | | traveled to the SFO to 

conduct a site survey for a possible FCI deployment of the 
RedHook ISDN intercept system. The technica l point of con tact in 
the SFO for this effort is spe cial Agent (SA)| | The 

case agent is SA | | also from the 1 5PU. 1 

The under cover (UC) location for the collection 
(U) and storade^ of the dat a forwarded from the RedHook collection 
device is in]__^J California. This site has existing T1 
facilities but this equipment does not support the B82S encoding 
required to forward the intercepted data being forwarded from the 
subscriber location. 

:: X To ensure that the facilities are correctly 

configured to suppo rt this ISDN i ntercept . a T1 connection is 

being e ngineered by I I from the L ~ location to the UC 

site in | [ This requires chat the SFO purchase two D^4 

channe 1 banKS configured to support B8 ZS line enc oding. SA| 

| |.s coordinating this effort with from Lucent 

Sa| | made a special request that the 

(UJ RedHopdt\systeHI 05 configured to operate with a Revox reel-to-reel 
tape recorder for this mission. This will facilitate the 
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translators operation at the SFO. EE 
configuration in the EST-4 laboratory 
configuration operates properly. 



b testing this 
!at this 


IfiAl I introduced EE I I t o| I 

I fr-oTri rSec uritv . sal r~EB1 land 

Mr. I l isited the l I site where access to the 

subscriber's ISDN line is available. The subscriber is being 
serviced from a 5ESS switch configured to deliver a four- wire 
interface direct to the customer. The RedHook sy stem is designed 
to only intercept at the two-wire interface. The ! I switch 
manager will convert the subscriber's line from four-wire to 
two-wire prior to the deployment of the RedHook system. The 
switch manager will then convert the line back to a four- wire 
interface prior to the service reaching the subscriber's desktop. 


The | ^ switch manager will have to find a way to 

deploy a network termination type 1 (NT1) device into the 
subscriber's facility without alerting other telephone 
ma intenance pe rsonn el . Th e switch manager will contact 
EE | l or SA I ~l if he encounters any difficulty 

implementing this NT1 deployment. 


(W The location of the intercept equipment is in a 

room with a combination spin lock. This room is in a separate 
building from the subscriber. The room that will house the 
bridge unit and power supply has a 19-inch rack and an 
uninterrup table 110 AC power supply available to support this 
installation. The patch panel was identified that will connect 
the ordered T1 line to the UC site. 

(U) X The target installation date for this RedHook 

system is after 12/15/96. A RedHook fly-away system has been 
identified and is being checked out to support this installation. 

LEAD (s) : 


Set Lead 1: 


INFORMATION RESOURCES 


For information only purposes. 


CC: Mr | 

Mr . Thomas 
Mr .1 
Mr . 

Mr. 

Mr. 
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jy Section, EST* 
extension ( 703 ) f 
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Thomas Marcus C 



Case ID #: {U) 269 -HQ- 100172 5 (Pending) 

Title: NETWORKS ACCESS DEVELOPMENT (EST-4) 

^ f AAW An A rill I 


Synopsis: '^^££3^ Trip report for travel to| 
direct support of loaned RedHook equipment | 

( U ) Beaci3£gdf r onw^^GU^ — 

Reference: (U) FD540 #1612992 Serial 

Details: 6 /4 / 96 Supervisory Special Agent—— 

■ . I an d Electronics Encr inee r { EE )1 

[raveled td lat the request of 


(C) . The purpose of this travel was to demonstrate a 

RedHook integrated services digital network (ISDN) intercept 
s ystem f or possible deployment and purchase of additional systems 
by | 1 The RedHook sy stem th at was used for this demonstration 
is ofTa temporary loan tq |for three months with an 

anticipated return date cTC y/b/96. 

The system was successfully installed and tested 
' ' at the facility. During testing it was discovered that the 

ISDN l L . „ J ns tailed for this demonstration were not functioning 
normally. The lines were experiencing abnormally high far end 
bit errors (FEBEs) . These FEBEs were occurring in bursts that 
repeatedly caused the RedHook serial bridge to go into a safety 
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bypass mode, when an ISDN line tester was placed on the line, 
the FEBEs were found to be intermittent and of varying severity. 


The I | were briefed on the RedHook 

system during 1 5. ftgyiba wne n febea were not as severe. 
Following the briefing, EE l l gave a live demonstration 

using the ISDN lines that were experiencing FEBEs. During the 
demonstration, the system performed perfectly. 

After the briefing was concluded, the tad h i-irn*g 


l jSSt T-ct-iirning to the Engineering Research 

JFacility , the \ b e r sonne 1 have repeatedly encountered the 

'FEBEs and asked if the RedHook system coul^J^jn^i^ied to 
operate in this abnormal environment. EeT I has briefed 

them on the fact that the system presently dliuws 250 times the 
bit error rate allowed by the Comite Consul tat if International de 
Te learanhiorue e t Telephonique (CCITT) standards for ISDN lines, 

EE l e xplained that it is not feasible to further relax 

the RedHook bit error safety bypass function. This would 
inevitably be responsible for a subscriber, on a lawfully 
authorized intercept, sending a repair person from the telephone 
company out to repair a RedHook serial bridge under these worst 
case conditions. 


t } " EE'] |ag-ain- advised ] I 

that the best pSSSlfilS action, at this time, is to transport the 
system to another location that has known good lines and proceed 
with the testing of the RedHook system. 


conf: 
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5/28/96 


FM FBI QUANTICO (268 -HQ-1001725) /ROUTINE/ 
TO DIRECTOR FBI (268-HQ-1001725) /ROUTINE/ 
I 1 ROUTINE/ 


SECRET 
CITE: //0857// 


(SJ 


PASS: FBIHQ, INFORMATION RESOURCES DIVISION, MRS. MORRIS, 

ROOM 5829. 


:cX 


SUBJECT: TRAVEL TO| I 573n/ gfi and fi/4-7/Qfi {> 

FOR THE INFORMATION UF I I EST-4, ELECTRONIC; 

SURVEILLANCE TECHNOLOGY SECTION, INFORMATION RESOURCES 
nTTfTCTnM ttctuq uac pttcm t REQUESTE D " 

| | TO PROVIDE TECHNICAL 

ASSISTANCE WITH THE INITIAL SETUP OF AN EXPERIMENTAL SYSTEM . 
THIS SYSTEM, CODENAMED REDHOOK, IS AN INTEGRATED SERVICES 
DIGITAL NETWORK INTERCEPT SYSTEM. FBI PERSONNEL ARE REQUESTED 
TO DELIVER AND SETUP ONE SYSTEM FOlf |lS TO RETURN 

THE SYSTEM AFTER THREE MONTHS. 1 

iu> - IN ATTENDANCE FROM EST-4 WILL BE SUPERVISORY SPECIAL 

_ | ELECTRONICS 

ENGINEER rTfflmiEECTRONTCS TECHNICIAN 


H TRAVEL ON 5/30/96 'WILL' BE A ROUND TRIP ON A BUREAU PLANE 
JtfTTM THE SOLE PURPOSE OF DELIVERING THE REDHOOK SYSTEM TO 

travel on 6/4-7/96 will be by commercial airline, during 

THESE DATES, THE ABOVE MENTIONED PERSONNEL WILL ASSIST! tN 

ITHE SETUP AND EVALUATION OF THE REDHOOK SYSTEM. | | 1 

(ASSISTANCE IS REQUIRED FOR LODGING. A RENTAL CAk IS REQUIRED 

r FOR THE DURATION OF THE STAY. . 

pn twt fw CON TACT FOR THI S EFFORT Ts l 

\ | MR. | | CAN BE REACHED AT 703 
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Precedence: ROUT THE 


Pate: 4/22/1996 

to: Information Resources 

Attn: J 

Ittnc losure) 

Front: information Resources 




Electronic Surveillance Technology Section, 

Contact: ^^^^^^^^^^^^^^utenslon /D3 

Approved By: 

Thoms Marcus c 

Drefttd By: 

Case ID #: 26 / 9 * HQ- 1001725 (Pending) 

Title: NETWORKS ACCESS DEVELOPMENT. (EST*4) 

REDHDOK PROJECT 
TRIP REPORT V10/96 IU) 

Synopsis: Trip report to Harris at Melbourne, Florida to airport 

project RedHook, (U) 

Classification: lUHHUeill Ili— 



Enclosure: Monthly Status Report on RedHook Engineering Services 

Program for April 1996, £U) 

^VetailsT The RadWook project is an integrated services digital 
network < ISDN) Intercept system, it is desired to capture ISOM 
signals between the telephone company central office and the 
ELfc&criber’s residence. The Redkopfc system inserts a bridging 
device into the "U n interface end forwards both the subscriber's 
and associate's STytal to its distribution and stinini2at ion 
components 


V)-J 
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to 4/10/96 Electronic* Engineer (EE}Q 


3 


of the est - 4, net with Harris per tonne l at their 

locati on to review progress on the RedHook project end give 
end 

^^^^^ Jrcprea ant«^he^ ^J^ ^^^^^7r^MlarH ^*en^ ^^^^^ 

from ViTr^TorporationT" 
represented EST*4 at a contract advisor* (U) 


an award fee presentation* Systems Engineer 


T 


The new multi ‘point task* which will al Lou the system 
to discriminate between mltiple telephone nutters sharing a 
single wire pair* is significantly ahead of schedule and well 
under cost. The software coding required to perform this task 
was lessened due to good coding practice on the original design* 

The system will no* have a menu pick in the set-up menu to setect 
any condonation of available telephone /umbers. The formal 
acceptance test plan <MP) for this task is scheduled for late 
Hay* (U) 


n. : 

ii.-. - 
lb“, ’ 




Work on the personal conputer (PCI workstation is 

starting and the Karri* team has identified a pentium ba sed 

platform to test* This system will use SUN Microsystems*! I 

[ f this software allows the RedHoofc 

this could significantly 

reduce maintenance costs for the RedHook system, (U) 


Task 2* the addition of National ISM 1 and 

Northern Telecom <MT> Custom, has gone through an internal design 
review and is ready to begin coding software. This task is 
considerably ahead of schedule* Again this is due in large part 
to the good coding practice implemented by the Harris team on the 
original design. (U) 


Upgrades to the operating systems on both the 
workstation software and the process and distribution unit <PWJ) 
were performed successfully* the POO upgrade involved 
significant trouble shooting on the part of Harris* The sources 
of the difficulties were identified at the software des i gn . hous e 

ccfit 
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that maintains the comntrcial software. (U) 


Task 1; workstation anomalies, has beefl completed with 
all Identified anomalies corrected. Task 1 wilt resura after the 
ATP is completed and any addition*)! anomalies are identified 
during testing. (U> 


A corawrcial source, Belcher, has been identified for 
a tack mounted power supply. This replacement power supply will 
replace the fully custom Harris developed and Harris manufactured 
rack mounted power supply. The Melcher simply was released for 
sale after the design and manufacture of the Harris custom 
supply. The Melcher supply is manufactured by a Swiss corpany 
for commercial telephone company use and meets or exceeds atl FCC 
requirements for installation in a telephone company central 
office, UO 




The bridge units have baen upgraded to include the 
ability to stay logically linked to the central office when the 
subscriber powers down their network terminator 1 (NTT), This 
problem arises when a terminal adapter is either powered from the 
saw source as a computer or is internal to the computer and the 
system is powered down. The bridge sensed this as a fault 
condition and went Into a bypass mode. The system now maintains 
the central office link and swaps status bits to remain 
transparent from the network side of the bridge. ^$4^ 

^ At the eubtcriber's side the bridge sends signals to 

the HI-1 waiting for it to be powered on. When it is powered on 
the time requi red for the (|T-1 to power up and synchronize with 
the network Is identical to the time required without the bridge 
present. This change required a change in code used In the 
programmable read only memory 


A retrofit of existing bridges is being done on both 
the card based serial bridges and the field operable serial 
bridges. The field operable serial bridge retrofit requires that 
the old PROMs be floated off the surface mount boards end new 
parts be installed. These bridges have had a lot of rework 
performed on the* in the past so there is a possibility that ore 


I 
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or two field operable bridge units my not survive this 
procedure, (U) 


While the retrofit of the PROMs is talcing place, two 
field operable serial bridge wiits will be outfitted with new low 
power AT&T ISDN transceivers. This should increase the distance 
from which the field operable serial bridge can be remotely 
powered. The increase in distance will have to be determined 
when the bridges are recertified after the parts placements ere 
cooplete, tuj 


The ATPs for the bridges , POU, and worksta tion are^ 
luled for late May, EE and Vi tro enp l oyee I* 


I Iwi 1 1 be present for the testing, EST-4 will invite at^S^T 

representative to be present, <U) 


The Harris award fee for this four month evaluation 
period was 65 percent of the award fee in excess of the nimmLMi. 
This was achieved by scoring 94 out of a possible 160 points on 
the evaluation criteria. This Harris team is performing 
extremely well by nesting or exceeding target development dates 
and coning in under budget for the major tasks worked on. (ui 
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OTD f Collection Architecture Meeting - March 17, 2006 
Summary Notes / Action Items 

Workshop discussion points 

• Need to include common EA terms in the read-ahead materials. OTD is especially 
interested in definitions for Information Technology (IT) and National Security System. 

o A significant portion of OTD's mission systems are clandestine technologies (ClanTech) 
and are not considered IT and do not touch the FBI enterprise. The focus of the FBI EA 
program should be on those OTD systems that interface with the FBI IT environment, 
o Collection assets produce intelligence and do not produce records. 

• Need to add satellites to the list of OTD priority projects (Technical Response Unit (TRU) 
Communication System). 

• Need to better define the OTD budget line items so that our reports do not over-inflate FBI 
IT budget totals. 

• OTD needs OCIO help with EDMS and the current service level agreements (SLA). Recent 
system outages have impacted mission accomplishment. 

Business Architecture 

• EDMS should be mapped to the BRM Intelligence Collection sub-function (recommended 
update for the next OMB Exhibit 300 submission). 

• OTD is initiating a Division-level Transition/Consolidation Plan to move towards a 
Consolidated FISA System in the future. 

Services and Capabilities 

• OTD has service needs for storage, search, evidence handling, and digital media. 

o Currently they store/back-up both FISA and criminal content on removable media, 
o OTD identified an evidence handling dependency with LD’s Laboratory Information 
Management System (LIMS). 

h2 

T&S Findings and Recommendations ' 

• Need to compare OTD initiatives 

o See the Emerging Technology Bulletin Research Bulletin at 


examples that discuss wireless technologies and many other topics and their impacts to 
law enforcement and collection. 

Action Items 

• Follow-up with l If or edits to the FBI Traceability Matrix. 

o DCS is the common name for pcs snnn finnn anH 6000 (DCS redundant), 
o DCS 5000 is synonymous witt| Redundant). 

o LEEDS is not an OTD sy stem \aeiermme me sponsor). f -' s 

• Follow-up wittl b r the OTD Transition Plan (Consolidated FISA System). to7c 

• | flans to visit OTD to gain a better understanding of where OTD systems 

witn tne FBI enterprise for inclusion in the FBI T&S Plan. 

• Follow-up with OTD on the status of the E-Requisition initiative. 

• Follow-up with OTD on the break out of their IT budget line items vs Collections budget 
items. 
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Collection Systems 


DCS 3000 and DCS 6000 are unclassified systems and each is type accredited as a 
standalone system. 

1 I /DCS5000 are classified systems that are not accredited but are in the 

process. However, there are significant unresolved issues. (We are identifying the 
significance of the identified risks to determine what plan of action to take to resolve 
issues.) It is highly unlikely that the C&A of these systems will be complete before 
October 2003. 

DCSNet will be a single network that will permit field offices to connect to telcos via a 
single network. The contract has not yet been awarded for this system and there is no 
current C&A activity. 

The DCS 3000 will the interface between the DCSNet, and the DCS 6000 and 
I DCS 5000. 

Consideration has been given to re-accrediting the DCS 3000 to document its role as the 
system in the middle between the DCSNet and the DCS 6000 and the 
| [ >CS 5000. 

The interface between DCS 3000 and DCS 6000 is a firewall (We need to determine how 
to handle this interface from a C&A perspective. ISA is inappropriate and MOA/MOU do 
not seam to be appropriate. Perhaps an ICD, firewall policy or a connection approval 
process should be created.) 


Interface between DCS 3000 anc 
being C&Aed separately. 

We understand thJ 


>CS 5000 is the Cl 100, which is 


/ill or has become the SCO for all of these systems. 


We are scheduled to meet with ERF staff at 1000, on Tuesday 29 July 2003 at ERF office 
at Quantico. 
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FBI Digital Collection 


Exhibit 300: Part I: Summary Information and Justification (All Capital 
Assets) 


I. A. Overview 


I. Date of Submission: 


8/4/2006 


2 . Agency: 

3. Bureau: 


Department of Justice 
Federal Bureau of Investigation 


4, Name of this Capital Asset: 


FBI Digital Collection 


5- Unique Project (Investment) 011-10-01-02-01-2503-00 

Identifier; (For IT investment only, see 
section 53. For all other, use agency ID 
system.) 

6. What kind of investment will this be in Mixed Life Cycle 
FY2008? (Please NOTE; Investments 

moving to O&M ONLY in FY2008, with 
Planning/Acquisition activities prior to 
FY2008 should not select O&M. These 
investments should indicate their current 
status.) 

7. What was the first budget year this FY2001 or earlier 
investment was submitted to OMB? 


8. Provide a brief summary and Justification for this investment, including a brief 
description of how this closes in part or in whole an identified agency performance 
gap: 

Digital Collection consists of the DCS-3000, DCS-5000, and DCS-6000, which provide digital collection 
tools, foreign counterintelligence gathering! and law enforcement evidence collection, respectively. 

Today's information technology capabilities afford terrorists and criminals many avenues to coordinate and 
commit offenses against US citizens and interests. Traditional phones were the primary avenue criminals 
used to communicate information regarding unlawful acts. Today, more incidents are committed and 
facilitated by terrorists using high-tech, non traditional commun [cations methods. Communications 
methods are dramatically increasing in number and complexities, resulting in the continual and evolving 
need for advanced methods of electronic surveillance of voice communications - methods of electronic 
surveillance have limited- life utility in intercepting newer, more secure types of publicly offered 
communications. The expansion of electronic surveillance activity m frequency, sophistication, and 
linguistic needs continues to increase the level of support required. An important factor behind this 
expansion is the changing demographic of targets that must be monitored by Investigators. The FBI must 
supply equipment and analytical tools to uniquely qualified language specialists to speed the translation 
and transcription process to meet the Investigators 1 needs. Further, the life span of today's technology is 
often much shorter than older technologies, resulting in more frequent need for solution development. 
Terrorist and criminal activity has expanded across international boundaries. Current United States-based 
intercept technologies and collection capabilities are not always sufficient to meet global requirements. 
Increased coordination and cooperation with other Government agencies and Governments of other 
countries place are needed. Digital collection must continue to clearly define electronic surveillance 
requirements and closely track manufacturers* approaches and solutions. Collection equipment 
manufacturers continue toward complying with technical standards as a result of the Communications 
Assistance to Law Enforcement Act (CALEA). One result of the CALEA standard is more information is 
available for collection. This increase in data coupled with the increased complexity of computer-based 
electronic surveillance information management systems will impose a requirement for efficient 
distribution to users and their respective collection systems 

9. Did the Agency's Yes 

Executive/ Investment Committee 
approve this request? 

a. If "yes," what was the date of this 5/19/2006 
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SECRET 




approval? 

10. Did tho Project Manager review this Ye 
Exhibit? 

11. Contact information of Project Manager? 
Name 


Phone Number 703] 

Email l~" 

12. Has the agency developed and/or Yes 
promoted cost effective, energy efficient 
and environmentally sustainable 
techniques or practices for this project. 

a. Will this investment include Yes 

electronic assets (including computers)? 

b. Is this investment for new No 

construction or major retrofit of a Federal 
building or facility? (answer applicable to 
non-IT assets only) 

1. If "yes," is an ESPC or UESC being No 
used to help fund this investment? 

2. If "yes," will this investment meet No 
sustainable design principles? 

3. If "yes," is it designed to be 30% 
more energy efficient than relevant code? 

13. Does this investment support one of Yes 
the PMA Initiatives? 


If "yes/ 1 check all that apply; 

13a* Briefly describe how this asset 
directly supports the identified 
initiative(s)? 


14. Does this investment support a 
program assessed using the Program 
Assessment Rating Tool (PART)? (For 
more information about the PART, visit 
www.whitehouse.gov/omb/ part. ) 

a. If "yes," does this Investment 
address a weakness found during the 
PART review? 

b. If "yes," what is the name of the 
PART program assessed by OMB’s 
Program Assessment Rating Tool? 

c. If "yes," what PART rating did it 
receive? 

15. Is this investment for information 


Human Capital, Expanded E-Government 

Strategic Management of Human Capital, The FBI 
acquires individuals with rare linguistic skills by 
collocating and networking the collection assets 
within proximity for employment, training, and 
development, A work flow management module is 
used by operations managers monitor productivity 
and distribute work accordingly. Expanded E-Gov. 
Systems are used in internal and external 
collaboration with Joint Tactical Task Forces, other 
federal departments, and intelligence organizations. 

No 
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technology? 

If the answer to Question; "Is this investment for Information technology?" was 
"Yes,” complete this sub-section. If tho answer is "No," do not answer this sub- 
section. 

For information technology investments only: 

16. What is the level of the IT Project? Level 1 
(per CIO Council PM Guidance) 

17. What project management (4) Project manager assigned but qualification 

qualifications does the Project Manager status review has not yet started 

have? (per CIO Council PM Guidance); 

18. Is this investment identified as "high No 
risk" on the Q4 - FY 2006 agency high 

risk report (per OMB's "high risk” 
memo)? 

19. Is this a financial management No 

system? 

a. If "yes," does this investment No 

address a FFMIA compliance area? 

1. If "yes,” which compliance area: 

2. If "no," what does it address? 

b. If "yes," please identify the system name(s) and system acronym(s) as reported 
in the most recent financial systems inventory update required by Circular A-ll 
section 52 


20. What is the percentage breakout for the total FY2008 funding request for the 
following? (This should total 100%) 

Hardware 33 


Software 3 

Services 36 

Other 26 

21. If this project produces information N/A 


dissemination products for the public, are 
these products published to the Internet 
in conformance with OMB Memorandum 
05*04 and included In your agency 
inventory, schedules and priorities? 

22. Contact Information of Individual responsible for privacy related questions: 


Name 



investment appropriately scheduled with 
the National Archives and Records 


Administration's approval? 


Lb 

L/C 



segbet 
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X.B. Summary of Funding 


Provide the total estimated life-cycle cost for this investment by completing the 
following table. All amounts represent budget authority in millions, and are rounded 
to three decimal places* Federal personnel costs should be included only in the row 
designated "Government FTC Cost," and should be excluded from the amounts 
shown for "Planning," "Full Acquisition," and "Operation/ Maintenance*" The total 
estimated annual cost of the investment is the sum of costs for "Planning," "Full 
Acquisition," and "Operation/ Maintenance." For Federal buiJdfngsand facilities, life- 
cycle costs should include long term energy, environmental, decommissioning, 
and/or restoration costs* The costs associated with the entire life-cycle of the 
Investment should be Included in this report. 


Table 1: SUMMARY OF SPENDING FOR PROJECT PHASES 
(REPORTED IN MILLIONS) 

(Estimates for BY + 1 and beyond are for planning purposes only and do not represent budget 

decisions) 


PY - 1 

and 

Earlier 

py 

2006 

CY 

2007 

BY 

2008 

BY+1 

2009 

BY + 2 
2010 

BY + 3 
2011 

BY + 4 
and 

Beyond 

Total 

planning 
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. 1 
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Note; For the cross-agency investments, this table should Include all funding (both 
managing partner and partner agencies}. Government FTE Costs should not be 
included as part of the TOTAL represented, 


2, Will this project require the agency to Ves 
hire additional FTE's? 

a. If "yes," How many and in what Begmnfng in FY08 ten E/ectronfc Techs are 

year? requested to perform requirements generation, 

test! ng/eva iuation, installation of new/upgraded 
equipment, and user training as well as, system 
administration expertise, telephonic/on -site 
technical support and system maintenance support 
for over 1,300 users. Four Electronic Engineers are 
required to provide technical expertise related to 
electrical interactions within internal system 
components and external telecom service provider 
components/equipment 

3. If the summary of spending has changed from the FY2007 President's budget 
request, briefly explain those changes; 

The FBI is in the process of analyzing alternatives for the next phase in FISA (What is this? Acronyms used 
the first time must be spelled out) collection systems. The requested personnel enhancement of 14 
personnel and non-personnel enhancement of $11,035,000 will enhance the Digital Collection projects 
capacity bo provide next generation systems, facilities, and capabilities to enable continuance of audio and 
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data collection in the furtherance of the FBI's FCI and Counterterrorism (CT) responsibilities, seamless 
transition to regionalized collection, and provide replacement equipment which will be required for 
Inoperable systems and component replacements which be required for obsolete equipment. Systems are 
nearing the end of their life cycle and require substantial investment in maintenance costs to maintain an 
adequate technological capability until they are replaced. Major overhaul or replacement of these systems 
will become a necessity beyond FY 2007. The deployment of advanced digital collection systems, which 
meet the FCI digital col lection' regional architecture represents a significant and critical factor in collection 
implementation. This requires additional knowledgeable staff for installation, training, and maintenance as 
well as provision of a new generation of collection systems to collect information in the most efficient 
manner. Contractor support, currently performing these functions, will not be available in FY08. The 
nonpersonnel enhancement will be used for new systems and equipment purchases ($6,850,000); system 
upgrades and installation ($685,000); and service maintenance agreements ($3,500,000). Collection 
systems will be required to interface with the upcoming Electronic Surveillance Database Management 
System (EDMS) to maintain current capabilities until their replacement. Without the requested resources, 
the number of funded contractor positions is expected to increase. 


IX. Acquisition/Contract Strategy 


1. Complete the table for all (Including all non-Federal) contracts and/or task orders 
currently in place or planned for this Investment. Total Value should include all 
option years for each contract. Contracts and/or task orders completed do not need 
to be Included. 



2. If earned value is not required or will not be a contract requirement for any of the 
contracts or task orders above, explain why: 

Contracts supporting Digital Collection are legacy contracts awarded prior to EVMS requirements. (EVMS 
has been a requirement since the inception of the Clinger-Cohen Act). However, current risks for contract 
performance rests with the firm fixed price contractors. Technical, scheduling, and cost performance is 
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managed by the Digital Collection project. 

3. Do the contracts ensure Section 508 
compliance? 

a. Explain why: 


Contracts supporting this requirement ensure 
Section 508 compliance In order to meet legal 
requirements as well as satisfy needs of user 
personnel 


4. Is there an acquisition plan which has 
been approved in accordance with agency 
requirements? 

a. If "yes,” what is the date? 

b. If "no," will an acquisition plan be 
developed? 

1, If "no," briefly explain why: 


10/29/2000 


I.D. Performance Information 


In order to successfully address this area of the exhibit 300, performance goals must 
be provided for the agency and be linked to the annual performance plan. The 
investment must discuss the agency's mission and strategic goals, and performance 
measures must be provided. These goals need to map to the gap in the agency's 
strategic goals and objectives this investment is designed to fill. They are the 
Internal and external performance benefits this investment is expected to deliver to 
the agency (e.g., improve efficiency by 60 percent Increase citizen participation by 
300 percent a year to achieve an overall citizen participation rate of 75 percent by 
FY 2xxx, etc.). The goals must be dearly measurable investment outcomes, and if 
applicable, investment outputs. They do not include the completion date of the 
module, milestones, or investment, or general goals, such as, significant, better, 
improved that do not have a quantitative or qualitative measure. 

Agencies must use Table 1 below for reporting performance goals and measures for 
all non-IT investments and for existing IT investments that were initiated prior to FY 
2005. The table can be extended to include measures for years beyond FY 2006. 
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2 [Enforce federal Near end of life ; 45% of Title II j Deploy additional ; Deployed 

t criminal laws Title III systems ; systems end of life' 30% of Title HI ! additional 40% of 

deployed in ffeld [ ' systems j Title III systems 

offices J _ r 


2003 [Identify, prevent 

1 Jlff'iM.f J ■■■■H 

20% of Title SO 

■and defeat foreign i 

standard Title 50 

systems collect via: 
analog inputs 

intelligence 

digital collection 1 

^joperations i 

systems in field | 

offices ] 

■■■■ 



nes of input 
■upported for Title j 
II and Tide 50 
igital collection 


inforee federal Near end of life 

:riminal laws Title III systems 

deployed in field 

J l pffices ; 

Identify, prevent Lines of input {Total lines of input {Increase lines of 

snd defeat supported for Title for analog and digital collection 

ntelligence III and Title 50 : digital collection input by 130% 

operations digital collection (# classified) 

:onducted by 

foreign power . ] 


otal storage ! Increase system 
capacity 12,500GB ; lstorage capacity 
by 9% 




ystem information: Total storage 
torage capacity for capacity 4,200GB 
ollected evidence ; 


re vent, disrupt, [(System capacity 
ind defeat [available to 

errorist operations [translate and 
>efore they occur transcribe 

intercepted Title 50 
[Information 


Enforce Federal 
Laws and 
represent the 
Rights and 
Interests of the 



12 S 











ex- 






















008 Establish an 
{enterprise-wide 
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All new IT Investments Initiated for FY 2005 and beyond must use Table 2 and are 
required to use the Federal Enterprise Architecture (FEA) Performance Reference 
Model (PRM). Please use Table 2 and the PRM to identify the performance 
information pertaining to this major IT investment. Map all Measurement Indicators 
to the corresponding "Measurement Area' 1 and "Measurement Grouping" identified in 
the PRM. There should be at least one Measurement Indicator for at least four 
different Measurement Areas (for each fiscal year). The PRM is available at 
www.egov.gov. 


Performance Information Table 2: 



Actual ; 
Results; 


I.E. Security and Privacy 


In order to successfully address this area of the business case, each question below 
must be answered at the systerti/applicatfon level, not at a program or agency level. 
Systems supporting this investment on the planning and operational systems 
security tables should match the systems on the privacy table below. Systems on the 
Operational Security Table must be included on your agency FISMA system Inventory 
and should be easily referenced in the Inventory (i.o v should use the same name or 
identifier). 

Alt systems supporting and/or part of this investment should be included in the 
tables below. Inclusive of both agency owned systems and contractor systems. For 
IT investments under development^ security and privacy planning must proceed in 
parallel with the development of the system/s to ensure IT security and privacy 
requirements and costs are identified and Incorporated into the overall life cycle of 
the system/s. 

Please respond to the questions below and verify the system owner took the 
following actions; 

1. Have the IT security costs for the system(s) been identified and Yes 

integrated Into the overall costs of the investment; 

a. If "yes," provide the "Percentage IT Security" for the budget year; 5 

2. is identifying and assessing security and privacy risks a part of the Yes 
overall risk management effort for each system supporting or part of this 
investment. 
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5, Have any weaknesses related to any of the systems part of or supporting this Yes 
investment been identified by the agency or 1(3 7 

a. If "yes/* have those weaknesses been incorporated agency's plan of action Yes 
and milestone process? 

6. Indicate whether an increase in IT security funding is requested to remediate No 
IT security weaknesses? 

a. If "yes/ 1 specify the amount, provide a general description of the weakness, and 
explain how the funding request will remediate the weakness. 


7* How are contractor security procedures monitored, verified, validated by the 
agency for the contractor systems above? 

Contractor security procedures are not required; systems that comprise the Digital Collection Project are 
agency owned and operated. 



t.F. Enterprise Architecture (EA) 


SECRET 
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in order to successfully address this area of the business case and capital asset plan 
you must ensure the investment is included in the agency's EA and Capital Planning 
and Investment Control (CPIC) process, and Is mapped to and supports the FEA. You 
must also ensure the business case demonstrates the relationship between the 
investment and the business, performance, data, services, application, and 
technology layers of the agency's EA. 


1. Is this investment included in your agency's target enterprise 
architecture? 


Yes 


a. If "no," please explain why? 


2. Is this investment included in the agency's EA Transition Strategy? 

a. If "yes," provide the investment name as identified In the Transition 
Strategy provided in the agency's most recent annual EA Assessment, 


Yes 


Digital 

Collection 

Program 


b. If "no," please explain why? 


3. Service Reference Model (SRM) Table; 


Identify the service components funded by this major IT investment (e.g., knowledge 
management, content management, customer relationship management, etc.}' 
Provide this information in the format of the following table. For detailed guidance 
regarding components, please refer to httpi//www. whitehouse.gov/omb/egav/. 



Use existing SUM Components or identify as "NEW". A "NEW" component is one not 
already identified as a service component in the FEA SRM. 

A reused component is one being funded by another investment, but being used by 
this investment. Rather than answer yes or no, identify the reused service 
component funded by the other Investment and Identify the other investment using 
the Unique Project Identifier (UPI) code from the OMB Ex 300 or Ex S3 submission. 

'Internal* reuse is within an agency. For example, one agency within a department is 
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reusing a service component provided by another agency within the same 
department. 'External' reuse is one agency within a department reusing a service 
component provided by another agency in another department. A good example of 
this is an E-Gov initiative service being reused by multiple organizations across the 
federal government. 

Please provide the percentage of the BY requested funding amount used for each 
service component listed in the table. If external, provide the funding level 
transferred to another agency to pay for the service. 


4. Technical Reference Model (TRM) Table: 

To demonstrate how this major IT investment aligns with the FEA Technical Reference Model 
(TRM), please list the Service Areas, Categories/ Standards, and Service Specifications 

supporting this IT investment. 


FEA TRM 
Service 
Cate gory 


FEA TRM j Service Specification (i.e. : 
Service j vendor or product name) ! 
Standard ) 


Microsoft 





ntegration 


fddleware 


j Database Access; PL/SQL 


^Remote Procedure Call (RPC) 













































Knowledge 
Distributor) and 
peljyerv _ _ _ ; 

Service Platform ■ 
and Infrastructure 

Hardware / 
Infrastructure 

Peripherals j 

i 

Hewlett-Packard Pri nters 

i 


Service Components identified in the previous question should be entered In this 
column* Please enter multiple rows for FEA SRM Components supported by multiple 
TRM Service Specifications 


In the Service Specification field. Agencies should provide Information on the 
specified technical standard or vendor product mapped to the FEA TRM Service 
Standard, including model or version numbers, as appropriate. 


5. Will the application leverage existing No 
components and/or applications across 
the Government (i.e., FirstGov, Pay.Gov, 
etc)? 

a, If " yes please describe. 

6* Does this investment provide the No 

public with access to a government 
automated information system? 

a, If "yes," does customer access 
require specific software (e.g., a specific 
web browser version)? 

1* If "yes, 11 provide the specific 
product name(s) and version numbers) 
of the required software and the date 
when the public will be able to access this 
investment by any software (l.e. to 
ensure equitable and timely access of 
government information and services). 


Exhibit 300: Part II: Planning, Acquisition and Performance Information 


1I.A. Alternatives Analysis 


Part II should be completed only for investments identified as "Planning” or "Full 
Acquisition," or "Mixed Life-Cycle" investments in response to Question 6 in Part I, 
Section A above. 

In selecting the best capital asset, you should identify and consider at least three 
viable alternatives. In addition to the current baseline, i.e., the status quo. Use OMB 
Circular A- 94 for all investments, and the Clinger Cohen Act of 1996 for IT 
investments, to determine the criteria you should use In your Benefit/ Cost Analysis. 

I. Did you conduct an alternatives analysis for this project? Yes 

a. If "yes," provide the date the analysis was completed? 1/27/2006 

b. If "no," what is the anticipated date this analysis will be completed? 

c. If no analysis is planned, please briefly explain why: 
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2. Alternative Analysis Results: 

Use the results of your alternatives analysis to complete the following table: 



Description of Alternative 


j Risk Adjusted j 
1 Lifecycle Costs ■ 
estimate 


Risk Adjusted 
Lifecycle 
Benefits 
estimate 


ol lection systems consolidated at locations || 
requiring the largest number of collections 1 167.653 
nd intercepts Jf 


llection system deployment and support j 
at locations containing the largest number j 
of linguists (translators), case agents, and 
analysts. j 


ZonsoUdated collections at locations with 1 
he la rges t ca pabillty for collections j 


Digital collection support provided through [ 
distributed network of full scale, 
autonomous systems r [ 



3. Which alternative was selected by the Agency's Executive/Investment Committee 
and why was it chosen? 

Alternative 1 - Volumetric Collection. An analysis found that a DCS- 5000 regionalized architecture 1) 
reduces overhead costs, and 2) improves quality and performance by consolidating expertise and 
minimizing complexity. A cost-effectiveness analysis of 10 alternatives was performed using evaluation 
factors - user and system locatton(s), technology, and collection volume. Alt 1 was chosen. It addresses 
shortfalls including multiple independent systems, capacity underutilization, and costly support for each 
site. Top 3 are above. 

4. What specific qualitative benefits will be realized? 

The primary benefits of a regionalized architectural approach for the next generation of DCS-5000 would 
be to: l) reduce overhead costs by utilizing "economies of scale* practices, and 2) Improve quality and 
performance by consolidating expertise and minimizing complexity. Regionalization will improve the FBI's 
collection and processing capability through the deployment of digital collection systems that will provide 
continuous digital collection in the event of catastrophic failure of individual systems. A regionalized 
architecture would meet 17 of 17 strategies, business and technologies/vulnerabilities assessment criteria; 
the current distributed architecture met only 5 of 17 criteria. Qualitative benefits indude: operations - 1) 
consolidation of locations permits majority of users to be collocated at few sites, 2) better utilization of 
system collection capacity, consolidated training; maintenance - 1) centralization of support resources, 2) 
fewer systems to maintain; accessibility - file transfers among sites more efficient, less resource intensive; 
3) resiliency - decreased point of failure due from unplanned outages. Additionally, this regionalized 
infrastructure will be EDMS compatible and complementary. The long-term gains of a regionalized 
architecture would be to alleviate ongoing installation, upgrade, and maintenance costs associated with 
fielded systems. Staffing would also be reduced since Computer Specialists and Linguists would reside at 
the Regional Offices, Staffing would be minimal at the field office locations. 


II. B. Risk Management 

You should have performed a risk assessment during the early planning and initial 
concept phase of this investment's life-cycle, developed a risk-adjusted life-cycle 
cost estimate and a plan to eliminate, mitigate or manage risk, and be actively 
managing risk throughout the Investments life-cycle. 

1. Does the investment have a Risk Yes 

Management Plan? 

a. If "yes,* 1 what is the date of the plan? 5/12/2006 

b. Has the Risk Management Plan been no 
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significantly changed since last year's 
submission to OMB? 

c. If "yes/’ describe any significant changes: 

Risks for the investment are identified within 3 categories: technical, acquisition, and financial. Each risk is * 
evaluated as to its probability of occurrence and level of impact on schedule, cost, and technical 
performance to determine the overall risk rating. Given that, with very limited deviation, effort performed 
for digital collection implementation Is completed by contracted support through firm fixed price contracts, 
there is limited risk associated with technical, cost and schedule performance. Baselines established are 
provided to contract vendors as contract requirements/deliverables; however. In order to mitigate the risk 
of unforeseen requirements and increased scope, a management reserve of 10% is maintained. Cost 
performance risk is mitigated through maximum usage of firm fixed price contracts and task orders. 

Budget projections are reviewed at least quarterly, independent government cost estimates are 
developed, analyzed, and compared to contractor proposals for each major acquisition. Out-of-tolerance 
variances are brought to the contractors' attention and cost/price is negotiated. 

2. If there currently is no plan, will a plan 
be developed? 

a. If "yes," what is the planned 
completion date? 

b. If "no," what is the strategy for managing the risks? 


3. Briefly describe how Investment risks are reflected in the life cycle cost estimate 
and investment schedule: 

Risks for the investment are identified within 3 categories: technical, acquisition, and financial. Each risk is 
evaluated as to its probability of occurrence and level of impact on schedule, cost, and technical 
performance to determine the overall risk rating. Given that, with very limited deviation, effort performed 
for digital collection implementation is completed by contracted support through firm fixed price contracts, 
there is limited risk associated with technical, cost and schedule performance. Baselines established are 
provided to contract vendors as contract requirements/deliverables; however, in order to mitigate the risk 
of unforeseen requirements and increased scope, a management reserve of 10% is maintained. Cost 
performance risk is mitigated through maximum usage of firm fixed price contracts and task orders. 
Budget projections are reviewed at least quarterly. Independent government cost estimates are 
developed, analyzed, and compared to contractor proposals for each major acquisition. Out-of-tolerance 
variances are brought to the contractors 1 attention and cost/price is negotiated. 


II. C. Cost and Schedule Performance 


1, Does the earned value management system Yes 
meet the criteria in ANSI/EIA Standard-748? 


2, Answer the following questions about current cumulative cost and schedule performance. The 
numbers reported below should reflect current actual information. (Per OMB requirements 
Cost/ Schedule Performance Information should include both Government and Contractor Costs): 


a. What fs the Planned Value (PV)? 190314 

b. What is the Earned Value (EV)? 186714 

c. What is the actual cost of work performed 188808 

(AC)? 

d. What costs are included In the reported Contractor only 

Cost/Schedule Performance information 

(Government Only/Contractor Only/Both)? 

e. "As of’ date: 3/2/2006 

3. What is the calculated Schedule Performance 0.98 
Index (SPI» EV/PV)? 



4. What is the schedule variance (SV = EV-PV)? -3600 

5. What is the calculated Cost Performance Index 0.98 
(CPI * EV/AC)? 

6. What is the cost variance (CV=EV-AC)? -2094 

7. Is the CV<Vb or SV% greater than +/- 10%? No 
(CV%= CV/EV x 100; SV%= SV/PV x 100) 

a. If "yes," was it the? 

b. If "yes," explain the variance: 


c. If "yes," what corrective actions are being taken? 

d. What is most current "Estimate at 472746 

Completion"? 

8. Have any significant changes been made to the No 
baseline during the past fiscal year? 

8. If "yes," when was it approved by OMB? No 


Comparison of Initial Baseline and Current Approved Baseline 



25 

pCS'6000 O&N jj 

09/30/ZQ11 ; 

l $Bsl56|| 

Project 

1 Jl 

09/30/2011' 

*255.512i| 


26 

jEfigrT 














FBI OGC ONLY. 

See attached preliminary review of field offices. Keep in mind that this is a snapshot, looking from the network out, of what 
currently is being collected. A separate survey of the practices of TTAs in the field offices is also being amased. 

None the less, it does seem to appear (at this point anyway with only 50% of the precints reporting) that, notwithstanding 
the DCS3000 default setting of not recording PCTDDs, a majority of offices are collecting PCTDDs, especially in classified 
investigations. 


PRIVILEGED DELIBERATIVE DOCUMENT - NOT FOR DISCLOSURE OUTSIDE THE FBI WITHOUT PRIOR OGC 
APPROVAL 


Associate General Counsel • Unit Chief 

Science & Technology Law Unit 

Engineering Research Facility 

Bldg 27958A, Room A-207 

Quantic o, VA 22135 

Tel. 703 

Fax. 70: 


fe6 
Jb 7 c 



Subject; Post Gut Through Digits 


UNCLASSIFIED 

NON-RECORD 


Gentlemen, 

I checked all 56 field office's criminal pen-register DCS-3000 systems for post cut through dialed digit information. The 
attached spreadsheet list the field office and the observed data for the office. Rather than counting all targets with and 
without the dialed digit extraction option set I categorized the data as All, Most, Some, Few, and None. All means all 
targets rn the system are currently set to collect post cut through digits. A ranking of Few means the majority of the 
targets are set with the option turned off. For example, WFO was ranked Few because only 6 out of 54 current targets 
were set to collect post cut through digits. 
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spefi£i 


Office 

Albany 

Albuquerque 

Anchorage 

Atlanta 

Baltimore 

Birmingham 

Boston 

Buffalo 

Charlotte 

Chicago 

Cincinnati 

Cleveland 

Columbia 

Dallas 

Denver 

Detroit 

El Paso 

Honolulu 

Houston 

Indianapolis 

Jackson 

Jacksonville 

Kansas City 

Knoxville 

Las Vegas 

Little Rock 

Los Angeles 

Louisville 

Memphis 

Miami 

Milwaukee 

Minneapolis 

Mobile 

New Haven 

New Orleans 

New York 

Newark 

Norfolk 

Oklahoma Ci 

Omaha 

Philadelphia 

Phoenix 

Pittsburgh 

Portland 

Richmond 

Sacramento 

Salt Lake Cit 

San Antonio 

San Diego 

San Francisc 

San Juan 


y/ Post-Cut Through Enabled 
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^SapET 



Springfield 
St. Louis 
Tampa 
WFO 
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From: 

Sent: 

To: 

Subject: 


| | (OGC) (FBI) 

T"«Hau or-inKar 2006 3:22 PM 

If OGC) (FBI) 

RE: Post-Cut-Through Digits Report — update 


SECRET 

RECORD 9999-7777 




From: 

Sent: 

To: 

Subject: 


SECRET 

RECORD 9999-7777 


(OGC) (FBI) 

7, 2006 2:31 PM 
(FBI) 

fcjh Digib Report — update 


I read through it twice and I think it is much improved from the first version in terms of explaining the process of 
collecting PCTDD. Unlike the first draft, I did not see any places where I thought the description sounded inconsistent 
with my understanding of how it all works. 

I noticed a few places where I thought the drafting was a little unclear. I don't know how familiar the court is already 
with the concept of PCTDD, but I thought we could be clearer in few places, which I highlighted in this draft and 
provided some wording suggestions. 


File: Post-Cut-Through Database Report- v2 - lap 10172006 jdp.wpd 


— Oriqjrial^Message^^^ 

From: | |GC) (FBI) 

Sent: 2006 10:19 AM 

To: I ~~l GCr (FBI) 

Subject: FW: Post-Cut-Through Digits Report— update 
Importance: High 


SECRET 


. I've redone the first 1 1 pages-and would appreciate your review as well You can ignore the one I sent yesterday 




OGC) (FBI 




From: 

Sent: 

To: 

Cc: 


Subject: 


Friday, August 18, 2006 3:40 PM r 
,PRONI. VALERIE E. (OGC) (FBj_ 


ttURtl 

10GC) (FBI) 


E 


naa\ fFRh 


lOGCVFBI) 


r 


Togo (fbi) 

mr 


£ 




FW: Post Cut Through Digits 


(OGC) (FBI )[ 




-bGC) 
JX3C) (FBI); 


UNCLASSIFIED 

NON-RECORD 


FBI OGC ONLY. 



PRIVILEGED DELIBERATIVE DOCUMENT - NOT FOR DISCLOSURE OUTSIDE THE FBI WITHOUT PRIOR OGC 
APPROVAL 


Associate General Counsel - Unit Chief 
Science & Technology Law Unit 
Engineering Research Facility 
Bldg 279 58 A, Room A-207 
Quantlc o. VA 22135 
Tel. 703] 

Fax. 70S 


t:>5 
b 7 c 


— Original 

From: | | 0 TD)(FM) 

Sent: ^ = n33PTAugusi ip, zuw> i0:55 AM 

To: | i (FBI); CLIFFORD, MICHAEL (OTD) (FBlf 

c. \\j r u) ^rolj 

Subject: Post Cut Through Digits 

UNCLASSIFIED 

NON-RECORD 


]0GC) (FBI); 


Gentlemen, 


I checked all 56 field office's criminal pen-register DCS-3000 systems for post cut through dialed digit information. The 
attached spreadsheet list the field office and the observed data for the office. Rather than counting ail targets with and 
without the dialed digit extraction option set I categorized the data as All, Most Some, Few, and None. All means all 
targets in the system are currently set to collect post cut through digits. A ranking of Few means the majority of the 
targets are set with the option turned off. For example, WFO was ranked Few because only 6 out of 54 current targets 
were set to collect post cut through digits. — 
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A summary of the results: 


T 


Field offices with All targets set 
Field offices with Most targets set: 

Field offices with Some targets 
Field offices with Few targets sej 
Field offices with No targets $e 

Note the Cincinatti office currently does not have any targets. 



tu.1 
Hit 
It 7C 
fo7E 



Post Cut Thru.xls 
(19 KB) 


UNCLASSIFIED 

UNCLASSIFIED 
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Office 

Albany 

Albuquerque 

Anchorage 

Atlanta 

Baltimore 

Birmingham 

Boston 

Buffak) 

Charlotte 

Chicago 

Cincinnati 

Cleveland 

Columbia 

Dallas 

Denver 

Detroit 

El Paso 

Hono/u/u 

Houston 

Indianapolis 

Jackson 

Jacksonville 

Kansas City 

Knoxville 

Las Vegas 

Little Rock 

Los Angeles 

Louisville 

Memphis 

Miami 

Milwaukee 

Minneapolis 

Mobile 

New Haven 

New Orleans 

New York 

Newark 

Norfolk 

Oklahoma City 
Omaha 
Philadelphia 
Phoenix 
Pittsburgh 
Portland 
Richmond 
Sacramento 
Salt Lake City 
San Antonio 
San Diego 
San Francisco 
San Juan 


h;.' 

hii 
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SElBttET 


b;:: 

b^L 



Seattle 
Springfield 
St. Louis 
Tampa 
WFO 


40 


sEesSi 



Hello, 1 am the tech agent assigned to the case as depicted below. 



In relation to the questions below, here is what I know: 

1 } SA | J bservatrons of his target who he knew to have several ) - [ rellular phones. 

I have no idea where the information about “codes 1 ' came from, 

$fl | "| ha$ provided me with this information after their most recent drug transaction with this subject. 
2) Baltimore has tested a test phone with ERF where ERF has stripped off the full content 


There still is an issue with how the Telephone Application (TA) will differentiate betweer f" "t nd regular 

DNR t ype intercepts. Bas ed up on the t ests with ERF there is no way of letting TA know thaf tmg information ram* 
fromal lervice | [set up a separate client to allow us to be able to easily_kee|) track o\ \ 

JUNH ttlitta information. However, TA cannot tell the difference between a£ - 


air anoa 


regular DNF 


If, 6 
b7ii 


— O riginal Message — 

From: L 


][BA) (FBI) 


Sent: Monday. August 21, 200 6 12:29 PM 

To: | | (BA) (FBI) 

UNCLASSIFIED 

NON-RECORD 


FYI 


ssa[ 


Squad 19 


Balti more Division 
Offic 
Cell: 


Itimj 



42 


Message 


"VdgL 1 uf 3- 


l(OGC) (FBI) 




From: 


(OGC) (FBI) 


Thursday, March 10, 2005 9:55 AM 

THOMAS, MAPr.iiRr /irnwFFti\£ 
flTDHFBhl If] 

| | (ITD) (FBI)] 


ICQ) (FBI); 
ItCQXFBI) 


| (OGC) (FBI);! 


Subject:! 


5) (FBI) 

No intercept requests since December Capability 


l(ITD) (OGA); CLIFFORD, MICHAEL 
dENTF ANTHONY P. (ITD) (FBI); 
l OGCt (FBI) 

JQ) (FBlI . 

inTnw FRlT l , 

ZZlOCA) (FBI1 r 


Having cajoled, warned and attac ked for releasing its | lervice without having first devised 

an intercept solution, anc < r aving rushed an interim solution into place inis p ast Dec ember "at great 
expense 1 *, is now reporting that mey have not received a single intercept request fni fcinra the interim solution 
was enabled. 


Rest assured that we will all hear this In testimony should legislation become and issue. 



F rom: I 

Td 

Subject IcALEA Update 

Date: Tuesday, Iftaich 08, 2005 1 1 : 1 1 AM 


I | asked for update on| (deployment and law enforcement use and 

1 IWfrtfiir the following. 1 1 


IWfrtfia the following 

> Original Messs 

> From ! 

^o l 

> Subject: (JALbA U| 

> Importance: High 


^08, 2005 10:53 AM 
ICC] 

Tate 


> Here is an update on | | Sincedeploying nationwide^ 

> CALEA capabilities in December 2UW, I r as not received any 

> requests from law enforce ment - fe deraf or state - for the 

> Interception of l "T services o l I data services. I am told 

> that FBI has been configuring its proprietary DS3000 collection 

> function.! I working with FBI to coordinate "live" testing 

> outside tne Lgg^and is also working with the FBI to obtain handsets 

> for the tests! Tdoes not know when FBI will be ready to begin 


11/17/2006 
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Message 
> routine (non 


sfeffff 


Jiterceptions. 


rngi2ufa - 


PRIVILEGED DELIBERATIVE DOCUMENT - NOT FOR DISCLOSURE OUTSIDE THE FBI WITHOUT PRIOR 
OGC APPROVAL 

I I 

Associate General Counsel - Unit Chief 

Science & Technology Law Unit ^ 

Engineering Research Facility ^ ' ;r , 

Bldg 27958A, Room A-207 
Quantico l VA > 22135 
Tel. 703f 
Fax. 703 


UNCLASSIFIED 
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11/17/2006 


Message 


Eapr 1 nfl*- 


> From: l C CI 

> S ent: Tuesday Marc h 08, 2005 10:53 AM 

> H I [CC] 

> Subject: CALEA Update 

> Importance: High 


> Here is an update oj I Since d eploying nationwide 

> CALEA capabilities in December 2CK3 4 | has not received any 

> requests from state — for the 

> interception ot| |data services. I am told 

> that FBI IragJjgen configuring us proprietary DS3000 collection 

> function. I I s working with FBI to coordinate "live" testing 

> outside the L ab, and is also working with the FBI to obtain handsets 

> for the tests. itnnw whan FBI will be ready to begin 

> routine (non-tesTi Interceptions. 


PRIVILEGED DELIBERATIVE DOCUMENT - NOT FOR DISCLOSURE OUTSIDE THE FBI WITHOUT 
PRIOR OGC APPROVAL 


Associate General Counsel • Unit Chief 

Science & Technology Law Unit 

Engineering Research Facility 

Bldg 27958 A, Room A-207 

Quanti co, VA 22135 

Tel. 70i 

Fax. 70i 


UNCLASSIFIED 


UNCLASSIFIED 


11/17/2006 
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SECBET 


Message 



-Pn^a *7 nf 1 


Having cajoled, warned and atta cked! ^ >r releasing its | t ervice without having first 

devised an intercept solution, an l h aving rushed an intenm solution into place this pastDecember 
"at great expense", is now reporting that they have not received a single intercept request fo j fc ince 
the interim solution was enabled. 


b2 

b'< IT. 


Rest assured that we will all hear this in testimony should legislation become and issue. 


Lb 



I UAL t a update 

. 1 . Art A A A J J 


Date; Tuesday, March 08, 2005 1 1:1 1 AM 


asked for update or ] | j 
learned the following. 


eployment and law enforcement use and 


> — OricjinajJWessage — 

> From l I CCI 

> Sem^jggjlajfJ^larch 08, 2005 10:53 AM 

> To i I [CC] 

> Subject: CALEA Update 

> Importance: High 


1=1 


Here is anupdate orC 




Since d eploying nationwideC 
Jhas not received any 


> CALEA capabilities in December 20 : 

> requests from law enforr.Qrrifint — federal nr state — for the 

> interception of ~ ^T data services. I am told 

> that FBI has been configuring its proprietary DS3000 collection 

> function. I i s working with FBI to coordinate "live" testing 

> outside the Lab, and is also working with the FBI to obtain handsets 

> for the tests. |_^ i _^^2ioy<now when FBI will be ready to begin 

> routine (non-test)| Interceptions. 


b.;: 
bs 
ib'-c 
b " 7 E 


PRIVILEGED DELIBERATIVE DOCUMENT - NOT FOR DISCLOSURE OUTSIDE THE FBI WITHOUT 
PRIOR OGC APPROVAL 


Associate General Counsel - Unit Chief 
Science & Technology Law Unit 
Engineering Research Facility 
Bldg 27958A, Room A-207 
Quanti co, VA 22135 
Tel. 70: 

Fax. 70 




Ar r «n. 
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Message 





•tv tf 


From I 


Subject: L 


]cALEA Update 


Date: Tuesday, March 08, 2005 11:11 AM 

| | asked for update on| |eployment and law enforcement use and 

iSSTRSUihe following. 

> — Original Messaqe- 

> Froml 

> Sei ^ 

> To: 


nTiiTirm^ 


_Tj cc ) 


ate i 
Jpa 


> Subject: CALEA Up 

> Importance: High 


08, 2005 10:53 AM 
[CCl 
ate 


> Here is an update o[ 


ata services. I am told 


I Since d eploying nationwid 

> CALEA capabilities in December 2Q04 I ""l ias not received any 

> requests frorn law enforcement - federal 

> interception o[ 

> that FBI 

> function.! 

> outside the L ah and is also working with the FBI to obtain handsets 

> for the tests, | ldoes not know w hen FBI will be ready to begin 


[or state - for the 

I hggjjgen < 

i. l I s working with FBI to coordinate "live" testing 


i configuring its proprietary DS3000 collection 


ib? 

hC 

ib';',’ 

-b7t: 


routine (non-tesf 


Jnterceptions. 


PRIVILEGED DELIBERATIVE DOCUMENT - NOT FOR DISCLOSURE OUTSIDE THE FBI 
WITHOUT PRIOR OGC APPROVAL 


Associate General Counsel - Unit Chief 
Science & Technology Law Unit 
Engineering Research Facility 
Bldg 27958A, Room A-207 
Quantl co. VA 22135 
Tel. 703 
Fax. 70 


UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 
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"P3giSUf2^ 


^Message 


out, I will, for my part, send it out via the GC to all CDCs and ask that the propagate it through the office 
and include it as an agenda item on their SACs Chiefs meetings. 


FromC 

Tc 

Cc p 
Subject|_ 


Jalea 


Update 


Date: Tuesday. March 08, 2005 11:11 AM 

iked for up> 
t following. 


I I asked for update or j [ deployment and law enforcement use and 

learned the following. 1 1 


> From: I 

>Toj. 




JUatSfi 08, 2005 10:53 AM 


CC] 


> Subject: CALEA Update 

> Importance: High 

□ i 


"since d eploying nationwide^ 

> CALEA capabilities in December 2004, | |ias not received any 

> requests from law enforcement - federal or state — for the 

> interception of fata services. I am told 

> that FBI has bee n connaunna ns propnetarv DS3000 collection 

> function I I s working with FBI to coordinate "live" testing 

> outside the Lab, and is also working with the FBI to obtain handsets 

> for the tests L__J22£LQfiLISQ£^^ ien FBI will be ready to begin 

> routine (non-test| jiterceptions. 


PRIVILEGED DELIBERATIVE DOCUMENT - NOT FOR DISCLOSURE OUTSIDE THE FBI WITHOUT 
PRIOR OGC APPROVAL 


b 

if-, 

b 

b 


Associate General counsel • Unit Chief 
Science & Technology Law Unit 
Engineering Research Facility 
Bldg 27958A, Room A-207 


Quantic o. VA 22135 
Tel. 703 
Fax. 70: 


UNCLASSIFIED 


UNCLASSIFIED 
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SKR5J 


Message 


Page 3 o f 4 



Having cajoled, warned and attacked ^ t forreleasing its I l ervice without 

having first devised an intercept solution, and j h aving rushed an interim solution into 
place this past December 'jat nraat expense", is now reporting that they have not received a 
single intercept request fo g p ince the interim solution was enabled. 


Rest assured that we will ail hear this in testimony should legislation become and issue. 



Date: Tuesday, March 08, 2005 1 1 : 1 1 AM 



: asked for update o i fc eplovment and law enforcement use and 
the following. 



> Here is an update on I 

> CALEA capabilities in ' 


?ince d eploying nationwidi 
lias not received an 


> requests f ro m law enforcement -- federal o r state - for the 

> interception m H ata services. I am told 

> that FBI has bee n configuring its proprietary DS3000 collection 

> fu ncti on L___M working with FBI to coordinate "live" testing 

> outside tne Lab'and is also working with the FBI to obtain handsets 

> for the tests. | _ lines not know when FBI will be ready to begin 

> routine (non-TBSTl linterceptions. 


b2 
be' 
"b " C 
b~E 


PRIVILEGED DELIBERATIVE DOCUMENT - NOT FOR DISCLOSURE OUTSIDE THE FBI 
WITHOUT PRIOR OGC APPROVAL 


11 / 17/2006 
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H“TiiPr~T~ 


Message 


Pugi 4 ul'4 


Associate General Counsel • Unit Chief 

Science & Technology Law Unit 

Engineering Research Facility 

Bldg 27958A, Room A-207 

Quantlco, VA 22135 

Tel. 70J 

Fax. 70 


UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 




11/17/2006 


Fro rtf 

Sent: Thursday, March 
To: THOMAS, MARCUS 
MICHAEL f lTDI fFBUl 
i ' rr p> i’FBII ~ 

cd t 


(OCA) (FBI} 

Subject} 


IGC) (FBI) 


rr rp) (FBI) 

(ITD) (FBI)l 


J(ITD) (OGA); CLIFFORD, 
DICLEMENTE. ANTHONY P. 


IfUm (FBI)l KOGC) (FBI) J 

K HP) (FBI) I— 

ho intercept requests since December Capability 



)N-REC( 


Having cajoled, warned and attacke d p r relea 
without having first devised an intercept solution, anc 
interim solution into place this past December "at gre 
they have not received a single intercept request for 
was enabled *- 


gr^aLfijP 


its* — l ervice 

l aving rushed an 
pense", is now reporting that 
since the interim solution 


Rest assured that we will all hear this in testimony should legislation become and 
issue. 




Date: Tuesday, March 08, 2005 11:11 AM 


U l asked for update or j [ deployment and law enforcement use and 

the following, 1 1 


> Oli£ 

> FronrP 

> SjUJI 


> Subject: CALEA Update 

> Importance: High 


TO, 2005 10:53 AM 

;c] 


> Here is an update or 

> CALEA capabilities i 

> requests from jaw er 

> interception o fl 

> that FBI has been cc 

> function. f | w 

> outside the 

> for the tests | | 

> routine (non'tiil 


or[ pi nee deploying nationwide 

s in UKSmpgr 2UU4 J ~~| has not received any- 
enforcement - federSTorsfate - for the 

p ata services. I am told 
configuring its proprietary DS3000 collection 
wording with FBI to coordinate "live" testing 
Qd is also working with the FBI to obtain handsets 
poes not know when FBI will be ready to begin 
linterceptions. 


'5S£|*£T 
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Message 




PugL 5 uf 5 


PRIVILEGED DELIBERATIVE DOCUMENT - NOT FOR DISCLOSURE OUTSIDE 
THE FBI WITHOUT PRIOR OGC APPROVAL 


Associate General counsel - Unit Chief 

Science & Technology Law Unit 

Engineering Research Facility 

Bldg 27958A, Room A-207 

Quantlc o. VA 2213 5 

Tel. 703 

Fax. 70: 


UNCLASSIFIED 


JN CLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 


11/17/2006 


Message 



l^l 1 ) il nP 


> Here is an update on 

> CALEA capabilities in 

> requests frorrUauLeol 

> interception c | 

> that FBI hoe fenww 

> function. |__Js wo 

> outside the Lab. and j 

> for the tests l —l 

> routine (non-tea 


e on | ~kinr-j> /j pptnyinn nationwide! 

ies in uecemper h as not received any 

m enfnrremAnt - ferieral nr slate - for the 

|ata services. I am told 
n conuguring its proprietary DS3000 collection 
|s working with FBI to coordinate "live" testing 
^nd is also working with the FBI to obtain handsets 
.w p 0 | win t) e ready to begin 

nterceptions. 


PRIVILEGED DELIBERATIVE DOCUMENT - NOT FOR DISCLOSURE OUTSIDE THE FBI 
WITHOUT PRIOR OGC APPROVAL 


Associate General Counsel - Unit Chief 
Science & Technology Law Unit 
Engineering Research Facility 
Bldg 27958A, Room A-207 
Quantlco L VA_22135 
Tel. 70^ 

Fax. 70: 


UNCLASSIFIED 


UNCLASSIFII 


SECRET 
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From i I 

Sent; Monday, August 2 1 , 2006 2:26 PM 
To: 

Cc: 

Subject: RE: I I ssues List -b; 



“Appendix B” is a section of the TRAR {Testing Results Assessment Report)* The TRAR was used in the early 
days of CALEA testing and includes a number of sections and Appendices that describe the Testing, Test 
Environment, Scheduling, Definitions, Results, etc* etc* The original documents ran hundreds of pages. 

As we progressed, we have dispensed with all sections except "Appendix B\ For consistency's sake, we have 
not changed the title* If we need to review former testing or results, we look in Appendix B* In the past several 
years, the testing results have been captured and placed in a stand-afone Appendix B, and that makes up the 
bulk of the informa tion sent to th e client* Specifically, Appendix B is the only information assembled by the test 
team for delivery tc | ~ 

Nobody on the team corresponds in wr iting to the vendo rs* Ail correspondence relating to testing results is sent 
to the vendors and service providers bJ Ian FBI employee, as opposed to any of us on the team, 

who are contractors* * * 


I doubt that any mention of the DCS-3000 would have bfifiajaoade to l I as that is an internal issue between 
the Test Team and TICTU* There is no good reason fo j \ o have been informed about our internal dealings 
between groups* As far as written detail ahmir rnmmei^CTmgfrtinn rhe Call Detail and Call Content separation, I 
am not awgr^^iporrespondence between| |an j | Appendix B is the information provided from 

the team* | K ill be a better source for aft flftSWfir Concerning theuCS-3000 and Call Detail / Call Content 
beyond Appendix B* 

Your assumption regarding the CDC and CCC are correct. In the case of the l I interim solution, ^ 

everything came to us in a single data stream on one channel. The Data and Content were interspersed, in ^ ^ 

order to listen to the audio, we had to post-process, separate the Content, and run it through an audio decoder. 


believe vour statement reaardina CM is riaht on the monev* All information is sent to the collection box. 



1 we unaouDtecny rererrea to a cue me ana a i*aa> me in our analysis* 



It is a correct statement to say that Law Enforcement must separate the Data from the Content. In order to get 
any kind of “Pen Register" data, the data stream would have to be post-processed by the collection system, and 
all non-Pe n Register (Call Content related) Information would have to be removed from the data received from 


I would encourage you to contad pirectly for additional insight* 


Regards, 


From i 

Sent: Monday, August 21, 2006 1:15 PM 



11/17/2006 
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-V * 


S 


J.igi 7 irP^ 



Thanksj 1 1 see that this is "Appendix B" to something. I’m interested in everything that was 

communicated t d l i this context. What was this document "Appendix B" to? Is it feasible to send 
me a copy? 


I'm especially interested in anything that might've mentioned that DCS-3000 was being used in the 
testing, and anything that suggested that another deficiency was the inability to provide call detail isolated 
from call content. If there is anything in writing like that, I’d love to see it. 



Attached is the Issues List f< 
Regards, 




11/17/2006 
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SECRET 


To:1 

Cc: 1 

Subiec l C ALEA Update 

Date: Tuesday. March 08,2005 11:11 AM 


___Jl asked for update onl leployment and law enforcement use and 
learned the following, I— I 


> On 

> From:[ 

> Se nt: Ti 
>ToC 


> Subject: CALEA Update 

> Importance: High 


108.200510:53 AM 

PC] 


> Here is an update oi 

> CALEA capabilities 

> requests fro m law e 

> interception c|__ 

> that FRI has heen o 

> functio n | w 

> outside meTat^jam 

> for the testsl ^ 

> routine (non-te|__ 


e oi| | Since p snlovino nationwide[ 

ies ffl U&C&HPgr 2UU4 | | ~ias not received any 1 
flt£Qjg[££l 21 gllI^j£ji^^njrsiate — for the 

l ata services. I am told 

3 configuring its proprietary DS3000 collection 
working with FBI to coordinate "live" testing 
and is also working with the FBI to obtain handsets 
Hoes not know w hen FBI will be ready to begin 
h tercantions 


PRIVILEGED DELIBERATIVE DOCUMENT - NOT FOR DISCLOSURE OUTSIDE THE FBI WITHOUT 
PRIOR OGC APPROVAL 


Associate General Counsel • Unit Chief 

Science & Technology Law Unit 

Engineering Research Facility 

Bldg 27958A, Room A-207 

Quantic o, VA 22135 

Tel. 703r 

Fax. 702 


UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 


^Se^ET 


# __ JSSQRBT # 

* **** ********* **** * ** #* ***** *** ** ** ** * *** * ** * **** *** ** ** ** * ** *** *** ** ** 

This e-mail message and any attached files are confidential and are intended solely for the 
use of the addressee(s) named above. This communication may contain material protected 
by federal law and/or attorney-client, work product, or other privileges, If you are not the 
intended recipient or person responsible for delivering this confidential communication to 
the intended recipient, you have received this communication in error, and any review, use, 
dissemination, forwarding, printing, copying, or other distribution of this e-mail message 
and any attached files is strictly prohibited. If you have received this confidential 
communication in error, please notify the sender immediately by reply e-mail message and 
permanently delete the original message. 


hi? 


UNCLASSIFIED 
NON -RECORD 


| (OGC) (FBI) 
uus> *i:5 5 AM 

T>) (FBIT l I OTP) (OGA); CLIFFO RD, MICHAEL flTDI 

[TTDWFBI); DICLEMENTE, ANTHONY P. (ITD) (FBI)! 


IjCQj] 
[CQ) (FBI 
TOGO (F 


ICpQ) (FBI 

riTD) (FBDl 
(FBI);[__ 


No intercept requests since December Capability 


Having cajoled, warned and aHai-^cHi releasing it l b ervice without having first 

devised an intercept solution, an d h aving rushed an interim solution into place this pa st Dece mber 
"at great expense", is now reporting that they have not received a single intercept request fo|__|since 
the interim solution was enabled. 




92 


> Subject: CALEA Update 

> Importance: High 




n 


> Here is an update orl feince deploying nationwida 

> CALEA capabilities in USCfifflPfif JJUU4 | | has not received any - 

> requests from state -- for the 

> interception of l fe ta services. I am told 

> that FBI has been configuring its proprietary DS3000 collection 

> function. I I working with FBI to coordinate "live" testing 

> outside tncq^wauLis also working with the FBI to obtain handsets 

> for the testsn_^_i2^J22Ui£12aL!S }ien FBI will be ready to begin 

> routine (non-testl Iterceptions. 


PRIVILEGED DELIBERATIVE DOCUMENT - NOT FOR DISCLOSURE OUTSIDE THE FBI WITHOUT b 
PRIOR OGC APPROVAL h 7 1 


Associate General Counsel - Unit Chief 

Science & Technology Law Unit 

Engineering Research Facility 

Bldg 27958A, Room A-207 

Quanl)coJfA22135 

Tel. 7031 

Fax. 703 



UNCLASSIFIED 


UNCLASSIFIED 
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forwarding, printing, copying, or other distribution of this e-mail message and any attached 
files is strictly prohibited. If you have received this confidential communication in error, please 
notify the sender immediately by reply e-mail message and permanently delete the original 
message. 


— -Original Message 

From: [ JOGC) (FBI) 

Sent: Thursday, March 10, 2005 9:55 AM 

c. (rro) fFBn: t m m (oga); cl 

(FBI); DICLEMENTE, ANTHONY P. (ITD) (FBI)I 


(FB 




m 


ZSEESf. 

izsvwmni 



(OCA) (FBI); 


No intercept requests since December Capability 


CQ) 
(ITD) (FBI 



NON-RECORD 


Having cajoled, warned and attackei 
devised an intercept solution, ancT* 
great expense", is now reporting tna 
interim solution was enabled. 


pr releasing il j p ervice without having first 

jiaving rushed an interim solution info place thiSjoasLOecember "at 
ey have not received a single intercept request fol lince the 


Rest assured that we will all hear this in testimony should legislation become and issue. 


FromJ_ 

To: 

Cc| 

Subject:! 
Date: Tif 


ICALEA Update 
th08, 200511:11 AM 


asked for update on 
the following. 


leptoyment and law enforcement use and 


> Fromi 

> Sent: i uesaay, ivi« 
>T j 

> Subject: UALtA L 

> Importance: High 


3TCTT 08. 2005 10:53 AM 
□[CC] 

Jpaate 


> Here is an update onl I Since d eploying nationwide 

> CALEA capabilities in December 2004 1 h as not received an 

> requests fro m law enforcement -- federal or state — for the 

> interception o£_____”__~_”^____]data services. I am told 

> that FBI has been configuring its proprietary DS3000 collection 
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-seei^T 


> function ! fc working with FBI to coordinate "live" testing 

> outside the Lab, and is also working with the FBI to obtain handsets 

> for the tests, i . inar nnt immmyhen FBI will be ready to begin 

> routine (non-te^^^^^_^^^__pterceplions. 


PRIVILEGED DELIBERATIVE DOCUMENT - NOT FOR DISCLOSURE OUTSIDE THE FBI WITHOUT 
PRIOR OGC APPROVAL 


I 1 

Associate General Counsel - Unit Chief 

Science & Technology Law Unit 

Engineering Research Facility 

Bldg 2 7958 A, Room A-207 

Quantl co, V A 22138 

Tel. 70J" - 

Fax. 70 


UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 


IfOGC) (FBI) 


From: 

Sent: 

To: 


Cc: 

Subject: 




I CQ) (FBI) 

tav. March 2005 2:33 P M 


I fOGC) (FBI); THOMAS, m arcusc rrmwFRiJ 
llTD) (OdA); (^LIFFORD, MICHAEL flTDWFBll 


TrmrmercMENTE, ANTHONY P. (ITD) (FBIM 

I l OGCWFRh,, Z 

' T5Cf(FBnl 

1H LM t mn i 

3°CA) 


I ITD) 

]TD) (FBI}; 


ifrTT 


ItCQI fFBITl 


RE 


l 


If OGC 


1- No fr 


intercept requests since DeceillUUI CdJJUUIIIty 


Inm 

J (ITD) (FBI)| | 

j(ll UJ (hBIJ 


UNCLASSIFIED 

NON-RECORD 


I just forwarded you a copy (on your laptop computer) of the e-mail we sent to the Law Enforcement Technical Forum on 
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December 22 advising them tha l l /Vireiess an| 

include this feature on their court orders where required" 


now had i 


solution and requesting that they 


Thanks for volunteering to send it out to the FBI CDCs. 



UNCLASSIFIED 

NON-RECORD 


Having cajoled, warn ed and a ttacked I b r releasing its I l ervice without having first devised an 

Intercept solution, anc j p aving rushed an interim solution into pfacgjhis past December "at great expense", is 
now reporting that they nave not received a single intercept request foi l j since the interim solution was enabled. 


Rest assured that we will all hear this in testimony should legislation become and issue. 



> O riginal Message 

> From: ! lOOl 

> SentTuesdg^J^grch 08, 2005 10:53 AM 

> To | | [C C] 

> SuOpCTTOCE7rOpuate 

> importance: High 
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> Here is an update oi| JSiucftdeploying nationwid^ 

> CALEA capabilities in U&CBfTlBfir has not received any 

> requests e™"]™* __ ~ for the 

> interception of|^_^^^_^^^^_^^^_|lata services. I am told 

> that FBI hasbeen configuring its proprietary DS30Q0 collection 

> function. I* I s working with FBI to coordinate "live" testing 

> outside the Lab.and is also working with the FBI to obtain handsets 

> for the *T<^ nnt Unnw wKon FBI will be ready to begin 

> routine (non-lesll interceptions. 


PRIVILEGED DELIBERATIVE DOCUMENT • NOT FOR DISCLOSURE OUTSIDE THE FBI WITHOUT PRIOR OGC 
APPROVAL 


TISSSEISRXSIltnrCounsel - Unit Chief 
Science & Technology Law Unit 
Engineering Research Facility 
Bldg 27958A, Room A-207 
Quantic o. VA 22135 
Tel. 7034 
Fax. 703 


Lj 

bd 

L-7'l' 

h-’T7 


UNCLASSIFIED 


UNCLASSIFIED 


From: 

Sent: 

To: 


Cc: 


Subject: 


0^ 


IITD) (FBI).v... 


]GC) (FBI) 


Luiujuv 


IUIZ5 AM 


GC) (FBI) 


II LI I I 4 . 2 UU 3 

l(OGC) (FBI): THOMAS, MARCUS C. (ITD) (FBlJ 

(UUA); CLIFFORD, MICHAEL (ITD) fFBI lJ "T TT 

OICLEMENTE, ANTHONY P. (ITD) (FBI)J [ 

I i/ncsm fppm j 

1 1(00) (FBI): [ "tmvFRivr 


I I (UUL!) t'HJH! I 

No inte 


□uiqwfBI) 
|(0C, 


Wf 


intercept requests since December Capability 


UNCLASSIFIED 


NON -RECORD 


ItD) 


U) (FOIL. 
(ITD) (FBL 


% 


ICQ) 


TD) (FBI) 


□ 

1 

b b 

b7C 

b7L 


Please calendar this item and get confirmation as soon as the order is issued. 
Tell the CALEWG when that happens. 


From: 

Sent: 

To: 



OGC) (FBI) 


THOMAS, 
tlTD) (FBI 


Subject: 


— IPOWFRivr irmuFRiv l 

IfCQWFBII IfITPHFBI 

(ITnHFBni KOGC) (FBt)i 

r . rr . t lTDHFBI) 

to intercept requests since December Capability 


lTD) (OGA); CLIFFORD, MICHAEL 

IfflgNT E. ANTHONY P. (ITD) (FBI); 

I (OGQiIEBU__ _ 

CQ) (FB IL I tCO\ 

■ / ita\ rrnil I i; 


)CA) (FBI); 



NON-RECORD 


Having cajoled, warned, 
intercept solution, an£ 
reporting that they have 


ave not ret 


j tacke j j ar releasing its I 

aving rusnea an interim solution in 
received a single intercept request fo 


jerv ice without having first devised an 
i this past December "at great expense", is now 
ince the interim solution was enabled. 


Rest assured that we will all hear this in testimony should legislation become and issue. 




Fr om 7 ! 

To; 

Cc \ 

Subject ! I CALEA Update 

Date: Tuesday, March 08, 2005 11:11 AM 


1 1 asked for update 
learned the following. 


leployment and law enforcement use and 


> From I I CC1 

> Q f r 08, 2005 10:53 AM 

> tJ Ircci 

> Subject: CALEA Update 

> Importance: High 


> Here is an update o n I Since d eploying nationwide!" 

> CALEA capabilities in uecemper zvu m l ias not received an\r 

> requests fronyUuLAalaccAauaLiftiadficaLor state — for the 

> interception o l l ata services. 1 am told 

> that FBI has haan confinufino its proprietary DS3000 collection 

> function f I working with FBI to coordinate "live 1 ' testing 

> outside tne Lab, and is also working with the FBI to obtain handsets 

> for the tests J"^~~|joes not know when FBI will be ready to begin 





106 , 


T 



In relation to the questions below, here is what I know: 

1) SA | O bservations of his target who he knew to have several ! fc ellular phones. 

! have no idea where the information about "codes" came from. 

S Al I has provided me with this information after their most recent drug transaction with this subject, 

2) Baltimore has tested a test phone with ERF where ERF has stripped off the full content. 

There still is an issue with how the Telephone Application (TA) will differentiate betweerj fnd regular 

DNR type intercepts . Based upo n the te sts with ERF there is no way of letting TA know thaf THIS imatmatro n came 
from 4 |ype service. I pet up a separate client to allow us to be able to easily keep track o| | 

I d nk related information. However, TA cannot tell the difference between a | |'call" and a 

regular DNR. 1 1 




From: I i ll (FBI) 

Sent: 12:29 PM 

To: I l BA) (FBI) 

Subject: FW: phone 

UNCLASSIFIED 

NON-RECORD 


FYI 


SSA 

“ 1 

Squa 

a iy 

Baltimore Division 

Offrc 



Cell: 
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J 



From: 


iGC) (FBI) 


Sent: 

To: 

Cc: 

Subject: 


Friday. August 18, 2006 3:55 Pi 


* 


TD) I FBIvf 


)) (FBI 

Kfc: Host-Cut- 1 hough -Dialed Digits 


l 


lOGCt (FBI 


i 


(OTD) (FBI) 


SE 


CORD 66F-HQ-A1 247863 


Does the Field control the forwarding function from DCS3000 or can you over-ride that from ERF? 

PRIVILEGED DELIBERATIVE DOCUMENT - NOT FOR DISCLOSURE OUTSIDE THE FBI WITHOUT PRIOR OGC 
APPROVAL 


JLSMHHUtU General counsel - Unit Chief 

Science & Technology Law Unit 

Engineering Research Facility 

Bldg 279 58 A, Room A-207 

Quant ico, V A 22135 

Tel. 703| 

Fax. 70; 


OriginalJJggSflflfi 

From: 

Sent: 

To: 

Cc: [ 

Subject: Digits 


l(OTD) (FBI) 

I a HlVlft 1AA DM 

J IgC)^EBU- 



JqgQl/fbI) 

|(OTD) (FBI) 


V . 


RECORD 66F-HQ-A1 247863 


The pen-register data forwarded from the DCS-3000 to the DCS-5000 and DCS-6000 systems is unfiltered, raw data. 
In most cases this information is associated with a full content intercept order. Occasionally, field offices elect to 
forward CALEA-based pen-register data obtained under FISA pen-register authority to the DCS-5000 In these cases, 
the PCTDD are delivered and collected by the DCS-5000 and eventually uploaded to TA. 


— Original Message--- 

From: I K OGC) (FBI) 

Sent: **Tn3av7'TugusrTB)* 2P05‘3!35 PM 

To: I iOfiQ (FBI) , . 

Cc: I |OTD) (FBI]| |(OTO) (FBI)| | (OTD) (FBI) 

Subject: Rf. Post-cuv-Ttvougn-Dialed Digits — 1 1 

RECORD 66F-HQ-A1 247863 


I was under the impression fronl|that DCS3000 itself does keep all data in an administratively accessed file 

a for debugging, including PuTUd even when the default of do not record is selected. I thought I understoond 
d say that that file is overwritten over time, but otherwise, if the do not record default remains unchanged, the 
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PCTDD does not go to TA or anywhere else. 

Is this not correct? 

PRIVILEGED DELIBERATIVE DOCUMENT - NOT FOR DISCLOSURE OUTSIDE THE FBI WITHOUT PRIOR 
OGC APPROVAL 


Associate General counsel - Unit Chief 

Science & Technology Law Unit 

Engineering Research Facility 

Bldg 27958A, Room A-207 

Quantico, VA 22135 

Tel. 70j 

Fax. 70 


— Original Message — 

From: f J)GC) (FBI) 

l-Ol PM 
(FBI) 

Cc*| |TD) (FBI) 

SuBjifli Mb: PWL'Cut- Though-Dialed Digits 

SECRET 

RECORD 66 F-HQ-A1 247863 


When DSC 3000 is used for a FISA collection, doesn't Ihe DCS 3000 pass all to th d P SC 5000) including 
the PCTTD -in other words for FISAs the DCS3000 does NOT use the default of not recoding the 
PCTTD???? I might have this incorrect, but I thought there were some differences, t- 

— Original 

From: 

Sent: 

To: 


Cc: 


Subject: 

RECORD 66F-HQ-A1247863 



FYI. 

Since OTD only acquires the information and passes it along, and since the determination on whether one 
set of PCTDDs is content and not addressing, routing, dialing or signaling can only be made at the field 
office or analyst level, there realiy is nothing technologically speaking that can be done to ensure that 
content determined PCTDD is not used for investigative purposes. 

However, OTD and STLU is proposing to amend the FD 871 which is required to be signed to authorize 
tech agents to implement a criminal or FISA PR to add a selection box requesting that PCTDD be 
recorded. That box will have an asterisk which near the signature line will alert approval signatories that 
"if Post Cut Through Dialed Digit (PCTDD) recording is required, approving authorities are certifying that 
they have read and will ensure compliance with the DOJ Deputy Attorney General’s policy directive of May 
24, 2004 prohibiting any investigative use of PCTDDs that are determined to qualify as content of 

Hi 



communications." In this way, there will at least be a record with a staff level supervisor, and ASAC 
acknowledging the DAG Directive each and every time they approve a pert register. In the absence of the 
box being checked, the DCS 3000 default of not recording PCTDDs will remain unchanged {although we 
still have the problem of non CALEA compliant provider networks were we cannot use the DCS 3000 and 
have to use older PR decoders that do not have the same ability to shut off recording of PCTDDs). 

Please advise if you see any problems with this approach. 

PRIVILEGED DELIBERATIVE DOCUMENT - NOT FOR DISCLOSURE OUTSIDE THE FBI WITHOUT 
PRIOR OGC APPROVAL 


1 

Associate General Counsel - Unit Chief 

Science & Technology Law Unit 

Engineering Research Facility 

Bldg 27958A, Room A-207 

Quantl co, VA 22135 

Tel. 70d 

Fax. 70 


— Original 

From: I I fOGCl (FBI) 

Sent: PM __ 

To: i (FB1)| yiGC) 

(FBl I If OGC) (FBI);| [OTD) (FBI); THOMAS, MARCUS C (OTD) 

(FBIjJI JfOGC) (FSn^Dl^LtntNj^^j^mNY^P. rm~m rrRn 

Cc: » (FBI); I I roGQ (FBll I (OGC) 

(FBI); CAPRONI, VALERIE E. (OGC) (FBI) 1 1 

Subject; Post-Cut-Though- Dialed Digits 

Importance: High 


SECRET 

RECORD 66F-HQ-A1 247863 



-It is STLU view that this encompasses surveillance assistance even when we retain custody and control of 
the equipment and just manage it for the benefit of the state/locals pursuant to a state/local order. 


See below concern from the fiekf-arguably if we retain custody and control of the equipment then we control its use, so 
most-if not all- of the issues raised by the AG order (resource control, liability/legal authority to conduct surveillance, 
disclosure of technique, not use by others for other purposes, etc ) are not really issues when we decide if, when, whether, 
how the equipment will be used. 

Your thoughts? 

— Original 

From: I Irrn (pet) 

Sent: _ Wednesday. January 04, 2006 1:55 PM 

To: | |OGC) (FBI) 

Subject: Kt: b rate/ Local ren Orders 


UNCLASSIFIED 



That's interesting. As you know, it is precisely FBI agents (TTAs) who are installing the equipment (DCS-3000) and 
participating in the surveillance (SAs reading off results of the pen to LEOs in the street and later processing the 
information for case purposes) without the three levels of approval noted in the policy. Will I now have to document each 
and every time we are instructed to ignore this policy? It Is uncomfortable to be put In this position. I welcome your further 
comments. 



□ 

Please note that the requirement to be named in the state court order is not a legal requirement but rather is an FBI 
policy requirement In feet, the AG order No 1945-95 regarding the loan of ELSUR equipment in a state/local matter 
does NOT require that the state court order expressly authorize the FBI assistance. Instead, it provides only that (g) 
No Federal Bureau of Investigation personnel may be used to install the equipment or participate 
in the surveillance, unless deemed necessary and authorized by the Director or his designee. 
This restriction does not prohibit maintenance and repair of the equipment when not installed. 
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I I the AUSA, Peter Ko, called 3/4/05 to say that they have no intention of subpoenaing anyone, they believe 

they will get "enough of a stipulation" from the defense to introduce the T3 evidence and thinks they will have no 
problems getting the evidence in -that some how, this "got blown way out of proportion" 



Would you please screen this matter, make contact with the AUSA and let me know the gist of the AUSA’s 

and TICTU's concern. , . 

In> 

t.7C 


PRIVILEGED DELIBERATIVE DOCUMENT - NOT FOR DISCLOSURE OUTSIDE THE FBI WITHOUT 
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Associate General Counsel • Unit Chief 
Science & Technology Law Unit 
Engineering Research Facility 
Bldg 27958A, Room A-207 
Quantico. VA 22135 


Tel. 70 


Fax. 70 



11/17/2006 



11/17/2006 



Message 


Page 1 01 r 


|OGC) (FBI) 


From: | [OTD) (FBI) 

Sent: Thursday. August 05. 200 4 10:16 AM 

To: I t 0GC) (FBI) 

Cc: 1 , Ifffnnn) tCQN) | _ 

tthtT^ I fQT DnFsnf 

I 1 1 1 I Ul IFB I B | (ITD) <FE*I 

A. (OTD) (FB I) L 1 

Subject: Pen Register, [Telephone Applications 


I am | ] newly assigned Unit Chief for the Telecommunications Intercept and Collection 

Technology Unit (TICTU) at ERF. This unit is responsible for p roviding electronic surveillance equipmen t to all 
FBI field offices. This equipment ranges from the 1033 unit, DCS- 

3000 (switched based equipment), the DCS-5000 (FISA platform), ana tne uus-ouuu (cnminal platform). I am 
contacting you to schedule a meeting of all parti es liste d in the cc: (and any you deem necessary) to meet here at 
ERF and work towards written guidance with the|__|FISA incoming data and what classification before 
telephone applications. 

TICTU is currently receiving increased communications from the field offices as to the direction to follow. I am 
providing two possible dates to meet: Thursday, August 26, at 10:00 a.m. or Friday, September 3rd at 10:00 
a m. Please advise of the date you pre fer, and if add itional information is needed before we meet. I can be 
contacted via e-mail or by telephone 701 1 1 await your response. 


SENSITIVE BUT UNCLASSIFIED 



11/17/2006 




i° gc > ' fbi > 


From: 

Sent: 

To: 

Subject: 


[ 


[ 


Kb: M6f6 aaiseas 






|(OGC) (FBI) 
.8 PM 


OGC) (FBI) 
s 


UNCLASSIFIED 

NON-RECORD 

li‘j >j 

Thanks. From my point of view, it means NO MORE DESCRIPTIONS NEED TO BE ADDED from that list at least. fL ' 

— Original Message 

From: I I fOGO (FBI) 

Sent: PM 

To: | |(OGQ (FBI) 

Subject: m “ 

UNCLASSIFIED 

NON-RECORD 


I 1 

This is what Tve learned from OTD: 


Most wireless carriers have centralized their CALEA delivery points. In most cases, CDC information (pen* 
register/trap-trace data) for all FBI intercepts per carrier are delivered to one FBI gateway per carrier The 
locations of the gateways vary and depend on the location and connection restrictions imposed by the carriers. 

DCSnet is a peerless and private IP network that supports the delivery and transport of CALEA-enabled intercept 
product from the FBI gateways to all 56 FBI field offices. It is an unclassified network, and is not used to transfer 
processed/collected ELSUR information-Nor is it in itself a collection system-the collection system is the DCS-3000, 

The DCS-3000 is a suite of software applications that support the FBI's CALEA-based intercepts. This suite of 
applications has two primary functions; 1) a gateway between all carriers' delivery systems and the FBI's collection 
systems and centers (e.g,, DCS-5000 in Atlanta Division), and 2) the primary collection system for all CALEA-enabled 
criminal pen-register and trap/trace intercepts. 

As I understand, the DCS-3000 serves as a gateway between carriers and the DCS-5000 system for security reasons. 
In essence, Security division will not allow a classified collection system to have connection to the outside-hence the 
DCS-3000 serves as the link and is for that purpose just a transport of the FISA material from the carrier to the DCS- 
5000 system. 


— Original Messaoe 


ri 


Sent! _ 
To: T 




Subject: More data oases 


jaiy 15, 2l . 
JOGC) (FBI) 


(FBI) 
'06 11:04 AM 


UNCLASSIFIED 

NON-RECORD 


1. 

b'.'C 


Have your heard of the Data Collection System Network (DCSNET) or the Rapid Prototyping Facility Network 
(RPFNET). Also , are DCS 3000 and DCS 5000 variations of each other, as far as pen register collection. 



I have reading a list of databases that the Security Division sent so that's where these issues are coming from 
Thanks, pik 


UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 
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OGC) (FBI 


f* 


From: 

Sent: 

To: 

Cc: 

Subject: 


1 









|[OTD) 
72006 8:27 
OGC) (FBI) 
TD) (FBJ) 


(FBI) 

AM 


UNCLASSIFIED L - 

NON-RECORD 

^ b".'¥, 

| ou are correct in your definition of th ^ l it receives pen register data from sources such as the Remote DNR 
and the DCS 3000 and enables the Elsur Tech to upload the data to T elephone Application s from one location. The 
system also allows the operator to program the Remote DNR's as well ! I 


-Original 


Sent: 

To: 

Subject: 




lfl * — 


pui 

TW? 


UESkL 


](OTD) (FBI) 

£etUiau£a.2006 5:37PM 

l OTD) (FBI) 


UNCLASSIFIED 

NON-RECORD 


Please review and advi 


Thanks, 


— Original Message — 
From: I 

Sent; Tturatw I 

To: I 

Subject: FW: 




OGC) (FBI) 

09, 2006 1:40 PM 
0TD) (FBI) 


UNCLASSIFIED 

NON-RECORD 


Please advise if correct- what does the|__|do? -thanks[ 

Original Messanp 

From: I Imn (FBI) 

Sent: 10:03 AM 

To: I I (OGC) (FBI) 

Subject: RE: 

UNCLASSIFIED 

NON-RECORD 


t_:.Z 

k,6 

b7._' 

b' J " 


The | p d DCS 3000 are FEN REGISTER collections— not content!!!! Yes the field elsur tech downloads the pen 
datsrantnrfen uploads it into TA for analysis but the SMP does NOT appfy to Pen Register data correct? 


From: 

Sent: 




i nursaay f T5l!fu3TyTJ5] 


I (OGC) 
77006 9:14 


(FBI) 

AM 


129 



Let me clarify something, however The field offices are telling me with respect to these databases that a certain 
number of people have access to these databases, so they are not simply collection devices, if people can access 
them and view data. People are having access to raw FISA data, correct? 


Original Me 


Toi l 

Subject! 


E go (fbi) 

5Bruarv 09, 2006 9:05 AM 
](OGC) (FBI) 


UNCLASSIFIED 

NON-RECORD 


hL 

be 

h ; £ 


Thel Is a pen register collection s ystem-si milar to DSC-3000~but its older and doesn't do everything that 
DSC juuJ does (e.g., can't understand bodes and some of the other CALEA provided data), so I 

believe that it is being phased out * * 



UNCLASSIFIED 

NON-RECORD 


Thanks. How about 


or a system labeled simply 


>y Baltimore), 



DCS-300D is the Collection system for pen data— to the extent it collects content it’s limited to SMS 
{text messages)-but it serves only as the collection point-the data is passed to another system (TA 
etc for analysis). 


Penlink is a software application that can be use d to help analyze pen data. 


Analyst Notebook (1-1) appears to be a software application that can be used with Choicepoint 
According to the following link (This is software that can be installed on FBINET. It allows for 



imported into i2 
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nronrj . 



— Original M 

From: 

Sent: 

To: 

Subject: 



JDGC)(FBI) 




iL.rj 


UNCLASSIFIED b7E 

NON-RECORD 


Anyone know what DCS-3000, Pe n lin k , r^_^_fjialy st Notewoork (t-1) are. These are all new 
ones that are coming up in the course of reading field office responses. 


UNCLASSIFIED 


UNCLASSIFIED 

UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 

UNCLASSIFIED 


UNCLASSIFIED 
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0GC1 (FBI 



From: 

Sent: 

To: 

Subject: 


C 


4 ITTTWT ^*1 .TJIM-TI 


RE: 


I (OGC) (FBI) 
, 9,2006 10:52 AM 
JlGC) (FBI) 


UNCLASSIFIED 

NON-RECORD 


You're right I missed that. SMP does not apply to pen registers. 

h6 

— Original /c - 

From: I l OGO (FBI) 

Sent: ~2E^EL£fitlM[iiiiL22 06 10:03 AM 

To: I I (OGC) (FBI) 

Subject: RE: 

UNCLASSIFIED 

NON-RECORD 


The) (and DCS 3000 are PEN REGISTER collections — not content!!!! Yes the field elsur tech downloads the pen 
data and then uploads it into TA for analysis but the SMP does NOT apply to Pen Register data correct? 


— OTigjpflLUfissaflfis^iiM 
From: I 
Sent: 

To: 

Subject: RE: 


I tOGQ (FBI) 
try 09, 2006 9:14 AM 
(OGO (FBI) 


UNCLASSIFIED 

NON-RECORD 


— Original Message- — 

From: I 1 b GC) (FBI) 

Sat ffi Ttiursdav. Fffl ruarv 09, 2006 9:05 AM 

To: l P GQ (FBI) 

Subject: RE: ~ 

UNCLASSIFIED 

NON-RECORD 


b": 

b6 

hr:. 

b?> 

hb 


Th q p s a pen register collection s ystem--si milar to DSC-3000~but its older and doesn't do everything that 
DSg"30Uo does (e.g. p can t understand !' 1 ' I codes and some of the other CALEA provided data), so I 
believe that it is being phased out 


— Original Message — 

[ 


From; 

Sent: 

To: 

Cc: 

Subject: 


ESI SHE 


Rt: 


|0 Q(W) 

TO^OTF8:51 AM 


(FBI) 

:)(FBI) 


UNCLASSIFIED 
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Thanks. How about 


— Original Me 


Sent: -J 

To; L 

Cc: r 

Subject: R 

UNCLASSIFIED 

NON-RECORD 


or a system labeled simply as ,, 3094" (by Baltimore)^ 


Jogq (FBI) 

Y 8:48 AM 

I fOGCWFBH 

(OGQ(FBI) 


This is the risk with getting input from the field --it appears they didn't understand the question. The 
items below are not database systems that contain raw FISA material fi e contend that must be 
minimized under the SMF funless minimization applies to pen data and td I 


DCS-3000 is the Collection system for pen data- to the extent it collects content it's limited to SMS 
{text messages )~but it serves only as the collection point-the data is passed to another system (TA 
etc for analysis). 

Fenlink is a software application that can be used to help analyze pen data. 


Analyst Notebook (M ) appears to be a software application that can be used with Choicepoint 
According to the following link (This is software that can be installed on FBINET, It allows for 
the input of data for graphical display and analysis. Pen-link data can be imported into i2 
Notebook! I 



— Original MessMi 
From: I 

Sent: 3 

To: | 

Subject: 

UNCLASSIFIED 

NON-RECORD 


| (OGC) (FBI) 
[V 09, 8:33 AM 

(OGC) (FBI 


Anyone know what DCS-3000, Penlink 
ones that are coming up in the course < 


Analyst Notewoork (1-1) are. These are all new 
eld office responses. 


UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 
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Subject: RE: FISC database response 


SECRET 
RECORD 3 19 xx 



The document is correct in my view. I am not sure what you mean by "original". The intercept data are delivered 
from the carriers’ intercept access points to us in "raw" formats. The DCS-3000 decodes these formats and 
presents the information in "human readable" format. The "human readable" formatted information is typical 
uploaded to TA by either saving the data to a remo ves bta disk fw e’ve always considered thistobethe 
"oriai n an o r through an automatic connection to th | | most field offices prefer th d “l ethod). If 

the] ]s used and the data is not saved to a removeable disk, the data remains on the DCS-3000 

indefinitely 



would you review the discussion of DCS-3000. make sure it explains how FISA information in DCS-3000 
is handled, including the manner in which it can be searched and retrieved. Also Is the raw pen register 
data stored in the DCS-3000 system or just collected there and then the original sent some place else for 
storage. If stored there, for how long is the original maintained? 



Here's a few more edits. It doesn't include the portion markings and it's still not clear to me what the 
interplay Is between EDMS and DWS with respect to email and chat collections. As it reads now, it 
appears that some (CT collections go into DWS and others into EDMS?) perhaps STAS can clarify. 


13S 


11/17/2006 


O riginal Message 

Fron d ~l (OGC) (FBI) 

Sent! Tuesday, November 01, 2005 11:43 AM 
To: l I (OGC) (FBI) 

Subject: FW: FISC database response 


SECRET 
RECORD 319 xx 


| apologize, I inadvertently left you off of this email. 

FI63I& let me know whether you can look at this. Also, please refer to the 1 101 version that I have 

attached rather than the 1031 one. 

thanks 

vpc 


Assistant General Counsel 
Policy & Training Unit 
National Security L aw Branch 
(202) 32j | 



OGC) (FBI 



CyD) (FBI); THOMAS, MARCUS C. 


OGC) (FBI): I 


wanagii 


Subject: FISC database response 


l(CD) (FBI)| 
](OGC) (FBr 


[OGC)(FBI); 


SECRET 







Se d I remark below. There is no reference I can provide regarding this non-standard feature. The 
ServingSystem Message identifies a carrier's network. It is used to identify the network of a carrier to which a 
subject has roamed. 



I S witches also provide thJ 

message. We have modified our DCS-3000 system to e 


I nformation in the Serving System 
mdard" feature. 





b;; 

bo 

ll:,7C 

b7Ei 


I forgot to provide the reference for J-Standard; 
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Message 




PugL 3 uf - i- 


it through the office and include it as an agenda item on their SACs Chiefs meetings. 


Fr orrl I 

Toj 

■Cjiihjot-i Ir.AI FA I Ipriate 

Date: Tuesday, March 08, 2005 11:11 AM 


1 1 asked for update o 
learned the following. 


epfoyment and law enforcement use and 


> Original Message 

> From l J CC| 


> Sen£ 

> To:f 


% 


uesdav. Marc h 08, 2005 10:53 AM 
ItCC] 


> Subject: CALEA Update 

> Importance: High 


> 

> 

> 

> 

> 

> 

> 

> 

> 


* 


Here is an update on | I Since d eploying nationwkJ 

CALEA capabilities in December 2UW | f ias not received an' 
requests from ! aw enforcement - federal ft f Atate - for the 
interception of (fata services* I am told 

that FBI has befit ! COffUgunM ITS Proprietary DS3000 collection 
function! (s working with FBI to coordinate "live" testing 
outside tne L ao, and is also working with the FBI to obtain handsets 
for the tests. I poes not know w hen FBI wilt be ready to begin 
routine (non-test) | I nterceptions. 


b? 
b6 
ib 7 C 
b7Z 


PRIVILEGED DELIBERATIVE DOCUMENT - NOT FOR DISCLOSURE OUTSIDE THE FBI 
WITHOUT PRIOR OGC APPROVAL 


Associate General Counsel - Unit Chief 
Science & Technology Law Unit 
Engineering Research Facility 
Bldg 27958A, Room A-207 
Quantico, VA 22135 
Tel. 703| 

Fax. 703 


UNCLASSIFIED 


UNCLASSIFIED 
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From: 

Sent: 

To: 

Subject: 


r 


RE; phone 


UNCLASSIFIED 

NON-RECORD 


n<BA) (FBI) 

arfc 530 pm 

JA) (FBI) 




Hello, I am the tech agent assigned to the case as depicted below. 



In relation to the questions below, here is what I know: 

1 ) s A ~L bservations of his target who he knew to have several j | ellular phones, 

I have no idea where the information about "codes' 1 came from. 

provided me with this information after their most recent drug transaction with this subject, 

2) Baltimore has tested a test phone with ERF where ERF has stripped off the full content 


There still is an issue with how the Telephone Application (TA) will differentiate betweer"”™^^^and regular 
R t voe intercepts . Based u pon the t ests with ERF there is no way of letting TA know that mis informati on came 

from A Ttype service !^ I set up a separate client to allow us to be able to easily keep tra ck o | I 

nation. He 


t tv 

4 ^ _ 

I . u ink related information. However, TA cannot tell the difference between a T 

regular DNR * * 


'call" and a 


3<ba) (FBI) 


— Ori ginal Message 

From: 

sent: Monday. August 21.~2006 12:29 PM 

To: | pA) (FBI) 

Subject! HAI!pnOW r 

UNCLASSIFIED 

NON-RECORD 


b( 

:iv 


FYI 


SS/C 


Squad 19 
Balti moi&DiuisiaQ. 
Office] 

Cell: 
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Step 8. Case Squad designates individuals) to operate the Pen Register (DCS 3000 system) 
located on the third floor (T-3 space). 


Step 9. Case squad provides signed Pen Register/2703(d) Order to IS-2. 


Step 10. Both the case squad and IS-1 shall evaluate the active and historical pen register 
information to determine the logical location to begin searching, i.e. latest specific cell cite and 
sector, on/off, times, etc. 


Step 10. Case Agent assigned to Pen Register maintains contact with IS-1 tracking team and 
provides update as to target’s cell phone use. 

IS-1 conducts live tracking operation. 


Recommendations: Any case squad that foresees the use of Pen Registers and Provider 
information for cell tracking purposes should: 

a. Maintain a file of pony Pen Register/2703(d) Orders for the major cellular providers. 
Ponies can be obtained from IS-2. 

b. Pro-actively meet with their perspective AUSA’s and discuss specifics of Order. 

c. Ensure squad members are familiar with the use of the DCS-3000/Pen Registers. 


DRAFT 11/03/05 (3:30 P.M.) 


I. (U) DEFINITIONS (As defined by the Federal Bureau of Investigation’s Office of 
the Chief Information Officer/Office of IT Policy & Planning/ Enterprise Architecture 
Unit); 

A. SYSTEM : An integrated aggregation of electronic devices, interfaces, software, 
and support functions designed to fulfill a specific mission requirement. A 
system may include equipment, trained personnel, facilities, data and procedures, 
and software. For project purposes, a system is typically defined as the highest 
level of hardware organization composed of multiple subsystems. Boundaries 
must be defined in defining a system for certification and accreditation, 

B. APPLICATION : IT (Informational Technology) assets that are included in a 
system to perform a specific function(s). For example, application software 
includes database programs, word processors, and spreadsheet programs. 

C. DATABASE : A collection of data stored electronically that is accessed by a 
processor to perform a function. 

D. NETWORK : A group of computers linked together to exchange and share 
information. Networks can consist of a number of linked computers in a specific 
physical location, a Local Area Network (LAN), or they may consist of 
computers located at different physical sites linked together by means of phone 
lines and modems or other forms of long distance communications. 


II. SYSTEMS DESCRIPTION REQUEST FROM OIPR: EDMS & DWS 

A. Electronic Surveillance (ELSUR) Data Management System (EDMS) 

1. Description of the types of Foreign Intelligence Surveillance Act (FISA) 
i nformation contained in EDMS. 

(U) EDMS contains ELSUR products from counterterrorism (CT) and 
counterintelligence (Cl) field collection systems involving: 

• Audio - copies of microphone surveillance and telephony audio, for a 
limited number of cases. 

• Email and chat - EDMS is an original collector of raw email and chat 
communications 

• Raw pen register data — for a limited number of cases originating from 
Red Wolf (See Section II1.A.1) 

• Test pen register data — for limited testing from DCS-3000 (See Section 
m.A.3) 

• Raw seized media — for a limited number of CT cases. 

• Minimized translation summaries (tech cuts) 


s] 


LT 


a. Description of the types of FISA information contained it[ 


b. Explanation of how access to FISA information is controlled, that is. 
restrictions on search and retrieval of information. 


h2 

b'7 F. 


(U> 


yiy Access to FISA facsimiles is generally restricted to predetermined 
authorized users generally linguists assigned to the case, the linguist’s 


supervisor, me i.ase Aeenr. ana me svstem aarmnisiraior in ine ornee 
where the data is collected. 1 1 




c. Implementation of standard minimization procedures. 


3. DCS-3000 isvstenri 

a. Description of the types of FISA information contained in DCS-3000, 

(U) DCS-3000 is the primary collection platform for pen-register/trap- 
trace data pursuant to the Communications Assistance for Law 
Enforcement Act of 1994 (CALEA), and this is the only information 
collected by the DCS-3000. Per the CALEA, this information is 
intercepted by the targets' service providers based on target telephone 
number and delivered to the DCS-3000 in standard formats. The 



SBflRET 


information is stored in text-formatted files for each target telephone 
number, 

b. Explanation of how FISA information is controlled, that is. restrictions on 
search and retrieval of information. 

(U) Most FBI field offices use the DCS-3000 as a "front-end" 
collector. The pen-register/trap-trace data collected by the DCS-3000 is 
typically manually uploaded to the Telephone Application (TA) database 
at FBI Headquarters, through which it can then be searched. The DCS- 
3000 team is working in conjuncture with EDMS (See Section H.A) to 
provide for an automatically pen-register upload to TA. The DCS-3000 
also has a rudimentary report generation feature and simple text-based 
search tools for use by Technically Trained Agents and system 
administrators. 


c. Implementation Of Standard Minimization Procedures. 




INVESTIGATIVE TECHNOLOGY DIVISION’S 
TECHNICALLY TRAINED AGENT MANUAL 







> MANUALS: For traditional DNR equipment Man uals see: 


■ Prir Hptaiu rpnar^inn tfiA nrs.Annn on tr. the TICTU Website at 


> MANUALS: For major Pen Register/Trap -Trace collection platform Manuals see: 


• Switch-based: In implementing switch-based Pen Registers and/or Traps and Traces, TTAs 
frequently utilize the Data Collection System (DCS)-3000 application suite and/or the criminal law- 
based (JSI) DCS-6000 (“Voice Box”) platform. In other conventional (non-CALEA) switch-based 
Pen Register/Trap and Trace cases, the interface for collecting such information may be one of the 
Pen Register DNR platforms produced by JSI. 


■ For details regarding the DCS- 30QQ system, eo to the TICTt ) Website and c onsult the 

Switch-Based Intercept Team a ] I 

■ j Fnr dat'd lr ramrdinrr the DPS./iOflPl gut^em, go to the TICTU Website and consult the 


> IVTANI J Al.S; For major Pen Reoisfer/Tran-Trace collection platform Manuals see: 


■ For details regarding more conventional (non-CALEA) DNR equipment and DNR 

platfor ms- etc., eo to the T1CTIJ Website and consu lt the Traditional Technologies Intercept 
Team a | | 


> MANUALS: For traditional DNR equipment Manuals see: 

I I 


• Network/Wireline Data-based ; In implementing Network or Wireline Data-related Pen Registers 
and/or Traps and Traces, such Pen Registers and/or Traps and Traces are frequently implemented 
by service providers using their own proprietary or commercially-available equipment. In some 
cases, the FBI (DITU), or specially-trained TTAs, can also effect such Pen Re gisters and/or T rans 
and Traces utilizing tools commercially-availa ble to law enf orc ement, such as i I 

Processing and viewing systems/tools such as L_____jnd ‘| T are also used. 


■ For details regarding __ 

to the DITU Website a | 

> manuals: For Manuals regarding products such as 
Website aj 


P 


:o to the DITU 



• Nish-Capacity -based : In implementing High-capacity-based Pen Registers and/or Traps and 
Traces, such Pen Registers and/or Traps and Traces are frequently implemented by TTAs in concert 


b7E 
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Such nondisclosure pertains to details (including dispfay) of this material. General descriptions or 
disclosures as to the overall technical functionality /operation of technical equipment or techniques 
are not prohibited. Any potential departure from this policy must be specifically approved by ITD 
at a unit chief or higher level before disclosure is made. See MIOG, Part 2, 10- 10. 1 3(4). 

• FBI Testimony . As set forth in MIOG, Part 2, 16-4.16, expert testimony, regarding Pen Registers 
and/or Traps and Traces or otherwise, is available from the Investigative Technology Division 
(ITD). Such requests may emanate from Federal or State prosecutors or defense counsel. In a 
number of cases, such ITD personnel may be qualified to testify as subject matter experts in a given 
area within the Technical Investigative Program (TIP). In other cases, it would be more appropriate 
for non-FBI personnel, such as personnel from communications service providers, equipment 
manufacturers, software vendors, etc., to testify as experts in a given area of expertise. 

The procedures for FBI technical. personnel who testify as subject matter experts within the FBI’s 
TIP are the same as those that apply to other FBI witnesses, including adherence to the dictates of 
28 C.F.R.§ 16.21 etseq. Any legal or procedural questions should be promptly brought to the 
attention of the appropriate Assistant United States Attorney (AUSA) and the appropriate field 
office CDC or to an attorney in the Technology Law Unit, Office of the General Counsel, FBIHQ. 

m) Evidence Acauisition/Recordation/Handline : 

Pen Registers and Traps and Traces acquire dialed number as well as other call-control signaling 
information. Pen Register equipment used in local loop interceptions typically captures audio 
tones/signaling that is then portrayed as dialed numbers and/or other call-control indicators. Under 
CALEA, which is carrier (and principally switch)-based, the Pen Register and/or Trap and Trace 
information acquired is referred to as “call-identifying information (CI1).” Under CALEA, delivery 
of CII to law enforcement is made over a “call data channel (CDC).” Details as to the elements/ 
format/messages for CALEA-compliant Pen Register and/or Trap and Trace uses in wireline and 
wireless networks are set forth in the J-STD-025. 

The interface for collecting such Pen Register and/or Trap and Trace information may be DNR 
platforms such as those produced by JSI or the CALEA-related DCS-3000 platform, which may 
connected to the DCS-6000 (Voice Box). 

Once Pen Register and/or Trap and Trace information is acquired, the signaling information should 
be recorded electronically as the “original evidence.” Electronic recordation can be accomplished 
through recorders attached to Pen Register/Trap and Trace DNR platforms such as those produced 
by JSI or the CALEA-related DCS-3000 platform or the DCS-6000 (Voice Box). 

Hardcopy printouts from the original electronic signaling may also constitute “original evidence.” 
However, post-processed (manipulated) Pen/Trap printout information, such as that produced 
through the “Telephone Application (TA),” while user-friendly for investigators and prosecutors, is 
technically not original evidence because it has been processed/manipulated by the TA program. 

If TTAs handle Pen Register/Trap evidence, they run the risk of becoming part of the “chain of 
custody” for the Pen/Trap evidence, thus exposing themselves to the possibility of having to testify 
(contrary to FBI policy). Hence, TTA involvement in evidence handling must be avoided. 

191 



i) Eauioment/Software/Tools (E/S/T): Technical Manuals ; 

For FISA law-based Pen Registers and/or Traps and Traces, various equipment, software, and tools 
(E/S/T) are used in the technical implementation. The E/S/T and its specifications and the technical 
manuals regarding the E/S/T, including maintenance, are addressed below. 

• Local Loop-based : In implementing local loop Pen Registers, the interface for collecting such 
information may be one of the tra ditional Pen R egister/DNR systems produced by JSI or the FISA 
law-based (Raytheon) DCS-5000 (j I platform. 


■ For details regarding traditional DNR equipment and DNR systems, etc., go to the TICTU 
Website and consult the Traditional Techno logies Intercept Team at 


> MANUALS: For traditional DNR equipment Manuals see: 

i i 

■ For details regarding the DCS-5000. go to the TICTU Website and consult the 


mamiiaic- Fnr mainc Ppn Rpoigfpr/Tran-Trgp/. co 1 lection platform Manuals see: 


• Switch-based: In implementing switch-based Pen Registers and/or Traps and Traces, TTAs 
frequently utilize the Data Collection System (DCS)-3000 application suite and/or the FISA law- 
based (Raytheon) DCS-5000 (“Red Wolf’) platform. In other conventional (non-CALEA) switch- 
based Pen Register/Trap and Trace cases, the interface for collecting such information may be one 
of the Pen Register DNR platforms produced by JSI. 


■ For details regarding the DCS-3 0Q0 system, go to the TICTU Website and c onsult the 

Switch-Based Intercept Team at | I 

■ For details regarding the DCS-5000 system , go to the TICTU Website and consult the 


> MANL'Al.S: For major Pen Recister/ l i ap- l rac e collection platform Manuals see: 


■ For details regarding more conventional (non-CALEA) DNR equipment and DNR 

platfor ms, etc., go to the TICTU Website and consu lt the Traditional Technologies Intercept 
Team ai I 


manuals: For traditional DNR equipment Manuals see: 


J 


h2 

h'r’F. 
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SECRET 



In the past, there was little or no prospect of FISA Pen Register and Trap and Trace information 
ever being used in court or other public venues. However, based upon recent rulings of the Foreign 
Intelligence Surveillance Court (FISC) and new interpretations of the FISA law and its purposes by 
the Department of Justice, it is now conceivable that FISA-based Pen Register and Trap and Trace 
information could be used as evidence in criminal cases or otherwise made public. With respect to 
utilizing classified equipment, etc. in cases that may be prosecuted, the Department of Justice issued 
a directive in 2002 entitled: “Procedures for the Use of Classified Investigative Technologies in 
Criminal Cases.” As a rule, these Procedures require coordination and clearance by the Department 
before such technologies can be used in criminal cases. 


m) Evidence Acauisition/Recordation/Handline : 

Pen Registers and Traps and Traces acquire dialed number as well as other call-control signaling 
information. Pen Register equipment used in local loop interceptions typically captures audio 
tones/signaling that is then portrayed as dialed numbers and/or other call-control indicators. Under 
CALEA, which is carrier (and principally switch)-based, the Pen Register and/or Trap and Trace 
information acquired is referred to as “call -identifying information (CII),” Under CALEA, delivery 
of CII to law enforcement is made over a “call data channel (CDC).” Details as to the elements/ 
format/messages for CALEA-compliant Pen Register and/or Trap and Trace uses in wireline and 
wireless networks are set forth in the J -STD-025. 

The interface for collecting such Pen Register and/or Trap and Trace information may be DNR 
platforms such as those produced by JSI or the CALEA-related DCS-30QQ platform, which may 
connected to the DCS-5000 (Red Wolf). 

As noted, above, in the past, there was little prospect of FISA Pen Register and Trap and Trace 
information ever being used in court or other public venues. However, based upon recent rulings of 
the Foreign Intelligence Surveillance Court (FISC) and new interpretations of the FISA law and its 
purposes by the Department of Justice, it is now conceivable that FISA-based Pen Register and 
Trap and Trace information could be used as evidence in criminal cases or otherwise made public. 

Once Pen Register and/or Trap and Trace information is acquired, the signaling information should 
be recorded electronically as the “original evidence.” Electronic recordation can be accomplished 
through recorders attached to Pen Register/Trap and Trace DNR platforms such as those produced 
by JSI or the CALEA-related DCS-3000 platform or the DCS-5000 (Red Wolf). 

Hardcopy printouts from the original electronic signaling may also constitute “original evidence.” 
However, post-processed (manipulated) Pen/Trap printout information, such as that produced 
through the “Telephone Application (TA),” while user-friendly for investigators and prosecutors, is 
technically not original evidence because it has been processed/manipulated by the TA program. 

If TTAs handle Pen Register/Trap evidence, they run the risk of becoming part of the “chain of 
custody” for the Pen/Trap evidence, thus exposing themselves to the possibility of having to testily 
(contrary to FBI policy). Hence, TTA involvement in evidence handling must be avoided. 
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ET 


■ For details regarding the Facsimile Intercept S ystems <m to the TTCTU Website and con sult 

the Traditional Technologies Intercept Team ad I 

• Switch-based: In implementing switch- based Title Ills, TTAs frequently utilize the criminal law- 
based (JSI) DCS-6000 (“Voice Box”) platform. The DCS 3000 system may also be used. In other 
conventional (non-CALEA) switch-based Title III, the interface for collecting such information 
may be one of the Pen Register DNR platforms produced by JSI. 

■ For details regarding the DCS-3 000 system, go to the TICTU Website and co nsult the 

Switch-Based Intercept Team atl I 


For details regarding tl 


>-6000 system, go to the TICTU Website and consult the 



collection platform Manuals see: 


For details regarding more conventional (non-CALEA) Title III equipment and Title III 
platform s, etc., go to the TICTU Website and consult th e Traditional Technologies Intercept 
Team atl 

> MANUAL S: For details regarding tr aditional T itle III equipment Manuals see: 


* Network/Wireline Data-based : In implementing Network or Wireline Data- related Title Ills, such 
Title Ills are frequently implemented by service providers using their own proprietary or 
commercially-available equipment. In some cases, the FBI (DITU), or specially-trained TT As, can 
also e ffect such Title Ills Utilizing tools ramn™»rri« 11 y.nvail«hl<» fnfflrrpmpnl 35 | 

| | ! Processing and viewing systems/tools such as | p re also useef. 

■ For details regarding t he use of “products" such al I go 

to the DITU Website J | 


> MANUAL: 
Website £ 



go to the DITU 


* Hieh-Canacitv -based : In implementing High-capacity-based Title Ills or Pen Registers and/or 
Traps and Traces, such interceptions are frequently implemented by TTAs in concert w ith ATU 
personnel utilizing high-capacity access products such as those in the lite, and the 

criminal law-based (JSI) DCS-6000 (“Voice Box”) platform. “ 


For details regarding the | 
High-Capacity Access Team site atl 


Iroducts, go to the ATU Website and consult the 



, go to the TICTU Website and consult the 


ET 


techniques, equipment, and information from disclosure, TAs and TTAs should not needlessly 
disclose or display (or permit disclosure or display) of such material to FBI investigators, FBI 
personnel, or to others (to include USAs and Strike Force Attorneys). 

Such nondisclosure pertains to details (including display) of this material. General descriptions or 
disclosures as to the overall technical functionality/operation of technical equipment or techniques 
are not prohibited. Any potential departure from this policy must be specifically approved by ITD 
at a unit chief or higher level before disclosure is made. See MIOG, Part 2, 10-10.13(4), 

• FBI Testimony ’. As set forth in MIOG, Part 2, 16-4.16, expert testimony regarding Title Ills is 
available from the ITD. Such requests may emanate from Federal or State prosecutors or defense 
counsel. In a number of cases, such ITD personnel may be qualified to testify as subject matter 
experts in a given area within the Technical Investigative Program (TIP). In other cases, it would 
be more appropriate for non-FBI personnel (i.e., personnel from communication service providers, 
equipment manufacturers, software vendors, etc. to testify as experts in a given area of expertise. 

The procedures for FBI technical personnel who testify as subject matter experts within the FBPs 
TIP are the same as those that apply to other FBI witnesses, including adherence to the dictates of 
28 C.F.R.§ 16.21 et seq. Any legal or procedural questions should be promptly brought to the 
attention of the appropriate Assistant United States Attorney (AUSA) and the appropriate field 
office CDC or to an attorney in the Technology Law Unit, Office of the General Counsel, FBIHQ. 


m) Evidence Acauisition/Recordation/Sealine/HandUne : 

• Evidence Acquisition : Title III equipment, techniques, systems, and platforms acquire communi- 
cations “content.” Title III equipment used in local loop interceptions typically captures analog 
audio tones/signaling that is then captured as “content.” Under CALEA, which is carrier and 
principally switch-based, Title III telephony content is referred to as call content and is transmitted 
over a “Call Content Channel (CCC).” Details as to the elements/format of CALEA-compliant call 
content in wireline and wireless networks are set forth in the J-STD-025. The interface for 
collecting call content may be DNR platforms such as those produced by JSI, or the CALEA-related 
DCS-3000 platform or the DCS-6000 (Voice Box) platform. 

• Evidence Recordation '. Title III, at 18 U.S.C. 2518(8)(a), states that: 

■ the contents of any wire, oral, or electronic communication intercepted by any means 
authorized . , . shall, if possible, be recorded on tape or wire or other comparable device. 

“ the recording of the contents of any wire, oral, or electronic communication , . . shall be done 
in such way as will protect the recording from editing or other alterations. . , 

■ duplicate recordings may be made for use or disclosure .... 

■ custody of the recordings shall be wherever the judge orders. They shall not be destroyed 
except upon an order of the issuing/denying judge and ... shall be kept for ten years. 

Hence, once Title III content is acquired, the signaling information should be recorded 
electronically as the “original evidence.” Such electronic recordation can be accomplished through 
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recorders attached to DNR platforms such as those produced by JSI or the CALEA-related DCS- 
3000 platform or the DCS-6000 (Voice Box) platform. 


Hardcopy printouts from the original electronic signaling, such as email content, may also constitute 
“original evidence.” 

• Evidence Sealine : Title III, at 18 U.S.C. 2518(8)(a), states that: 

■ the presence of the seal provided for by this subsection, or a satisfactory explanation for the 
absence thereof, shall be a prerequisite for the use or disclosure of the contents of any wire, 
oral, or electronic communication or evidence derived therefrom . . . 

■ immediately upon the expiration of the period of the order, or extensions thereof, such 
recordings shall be made available to the judge issuing such order and sealed under his 
directions. 

The U.S. Supreme Court has addressed the criticality of “sealing” recordings under Title III (18 
U.S.C. 25 1 8(8)(a)}, with the potential for exclusion of the recorded evidence where delayed sealing 
occurs (even where no bad faith is found) . See United States v. Rios, 495 U.S. 257 (1990). 

Accordingly, FBI policy requires prompt "sealing” (and any necessary resealing) of recordings, 
MIOG, Part 2, 10-9.10(9) states: 

It is also necessary that the post-execution sealing requirements of Title 18, USC, 
Section 2518(8)(a) be met. Failure to adhere to this requirement could result in suppression 
of relevant interceptions in the absence of a satisfactory explanation for any delay in sealing. 
Agents should therefore be prepared to submit the original recordings of all interceptions to 
the issuing judicial official for sealing immediately at the conclusion of the period of 
continuously ordered electronic surveillance. In this context, if there is no break in time 
between the expiration of the original order and any subsequent extensions. Agents may 
wait until the expiration of the final extension before fulfilling this requirement. 

If any delay in making this delivery is anticipated, the Agent supervising the 
electronic surveillance should document the causes for this delay, i.e., duplication equipment 
failure, unforeseen manpower allocation priorities, and notify the supervising Assistant 
United States Attorney or Strike Force Attorney of the anticipated delay. If the supervising 
Agent anticipates this delay to be any greater than five days from the expiration date of the 
continuous electronic surveillance, he/she should, through the supervising attorney, within 
that five-day period obtain an extension of time in which to fulfill the sealing requirements 
from the appropriate judicial official. 

If original recordings require technical enhancement, analysis, comparisons, etc., the 
post-execution sealing requirement under Title 18, USC, Section 25 1 8(8) still must be met. 
Therefore, procedurally, once the sealing requirement attaches, all recordings should be 
sealed in a timely fashion with the court first, and then unsealed with the court’s approval if 
the recordings require enhancement, etc. Once unsealed, the recordings should be promptly 
submitted by the field to the Engineering Research Facility (ERF), Investigative Technology 

— foster 
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